Technical Description

A vulnerability has been identified in Mandriva, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an error in NASM. For additional information, see : VUPEN/ADV-2008-1811

Affected Products

Mandriva Linux 2008.1

Solution

Upgrade the affected packages :

Mandriva Linux 2008.1:
e1341726c74cee725268e292736163e8 2008.1/i586/nasm-2.02-1.1mdv2008.1.i586.rpm
44741f5580b9b7e64fecc26814590302 2008.1/i586/nasm-doc-2.02-1.1mdv2008.1.i586.rpm
9a52325d2063b8e6461cc110bf5c99fe 2008.1/i586/nasm-rdoff-2.02-1.1mdv2008.1.i586.rpm
4e9ca678761155cdd0fcbc47b99e1ffe 2008.1/SRPMS/nasm-2.02-1.1mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
a0658241d5d1bd9d0757b20cd1b49619 2008.1/x86_64/nasm-2.02-1.1mdv2008.1.x86_64.rpm
c4097b75d9d9fbc85543aa005da7e78e 2008.1/x86_64/nasm-doc-2.02-1.1mdv2008.1.x86_64.rpm
b5f13c0f7ca800623c7858451fdd9891 2008.1/x86_64/nasm-rdoff-2.02-1.1mdv2008.1.x86_64.rpm
4e9ca678761155cdd0fcbc47b99e1ffe 2008.1/SRPMS/nasm-2.02-1.1mdv2008.1.src.rpm

References

http://www.vupen.com/english/advisories/2008/1885
http://archives.mandrivalinux.com/security-announce/2008-06/msg00030.php

ChangeLog

2008-06-23 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.