CVE-2021-45257

An infinite loop flaw was found in nasm's preproc.c via paste_tokens() function. An attacker with local network access could pass a specially crafted unknown input causing an application to halt or crash leading to a denial of service.

This issue does not affect the versions of NASM shipped with Red Hat Enterprise Linux 6 and 7, as they do not include the vulnerable code in their source code. The version of NASM shipped with Red Hat Enterprise Linux 8 is marked as won't fix because it is low priority flaw and real (non-malicious) assembler source code will never run into this problem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.