CVE-2017-10686 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-10686 Interim 1 32 2025-10-05T02:16:54Z current 2021-05-30T13:58:18Z 2025-10-05T02:16:54Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-10686 In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-August/003087.html E-Mail link for SUSE-SU-2017:2044-1 https://lists.suse.com/pipermail/sle-security-updates/2017-August/003088.html E-Mail link for SUSE-SU-2017:2045-1 https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html E-Mail link for SUSE-SU-2019:14246-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 MozillaFirefox-68.2.0-78.51.4 MozillaFirefox-branding-SLED-68-21.9.8 MozillaFirefox-translations-common-68.2.0-78.51.4 MozillaFirefox-translations-other-68.2.0-78.51.4 firefox-atk-lang-2.26.1-2.8.4 firefox-gdk-pixbuf-lang-2.36.11-2.8.4 firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 firefox-gio-branding-upstream-2.54.3-2.14.7 firefox-glib2-lang-2.54.3-2.14.7 firefox-glib2-tools-2.54.3-2.14.7 firefox-gtk3-branding-upstream-3.10.9-2.15.3 firefox-gtk3-data-3.10.9-2.15.3 firefox-gtk3-immodule-amharic-3.10.9-2.15.3 firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 firefox-gtk3-immodule-multipress-3.10.9-2.15.3 firefox-gtk3-immodule-thai-3.10.9-2.15.3 firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 firefox-gtk3-immodule-xim-3.10.9-2.15.3 firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 firefox-gtk3-lang-3.10.9-2.15.3 firefox-gtk3-tools-3.10.9-2.15.3 firefox-libatk-1_0-0-2.26.1-2.8.4 firefox-libcairo-gobject2-1.15.10-2.13.4 firefox-libcairo2-1.15.10-2.13.4 firefox-libffi4-5.3.1+r233831-14.1 firefox-libffi7-3.2.1.git259-2.3.3 firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 firefox-libgtk-3-0-3.10.9-2.15.3 firefox-libharfbuzz0-1.7.5-2.7.4 firefox-libpango-1_0-0-1.40.14-2.7.4 libfirefox-gio-2_0-0-2.54.3-2.14.7 libfirefox-glib-2_0-0-2.54.3-2.14.7 libfirefox-gmodule-2_0-0-2.54.3-2.14.7 libfirefox-gobject-2_0-0-2.54.3-2.14.7 libfirefox-gthread-2_0-0-2.54.3-2.14.7 libfreebl3-3.45-38.9.3 libfreebl3-32bit-3.45-38.9.3 libsoftokn3-3.45-38.9.3 libsoftokn3-32bit-3.45-38.9.3 mozilla-nspr-32bit-4.21-29.6.1 mozilla-nspr-4.21-29.6.1 mozilla-nspr-devel-4.21-29.6.1 mozilla-nss-3.45-38.9.3 mozilla-nss-32bit-3.45-38.9.3 mozilla-nss-certs-3.45-38.9.3 mozilla-nss-certs-32bit-3.45-38.9.3 mozilla-nss-devel-3.45-38.9.3 mozilla-nss-tools-3.45-38.9.3 nasm-2.03.90-2.3.1 nasm-2.10.09-4.5.1 nasm-2.13.02-1.17 nasm-2.14.02-3.4.1 nasm-2.15.05-150500.1.2 nasm-2.16.03-150700.1.8 nasm-2.13.02-1.17 as a component of SUSE Linux Enterprise Module for Development Tools 15 nasm-2.13.02-1.17 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 nasm-2.13.02-1.17 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 nasm-2.14.02-3.4.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 nasm-2.14.02-3.4.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 nasm-2.15.05-150500.1.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 nasm-2.15.05-150500.1.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 nasm-2.16.03-150700.1.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 MozillaFirefox-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-branding-SLED-68-21.9.8 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-translations-common-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-translations-other-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-atk-lang-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gdk-pixbuf-lang-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gio-branding-upstream-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-glib2-lang-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-glib2-tools-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-branding-upstream-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-data-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-amharic-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-multipress-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-thai-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodule-xim-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-lang-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-gtk3-tools-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libatk-1_0-0-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libcairo-gobject2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libcairo2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libffi4-5.3.1+r233831-14.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libffi7-3.2.1.git259-2.3.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libgtk-3-0-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libharfbuzz0-1.7.5-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA firefox-libpango-1_0-0-1.40.14-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfirefox-gio-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfirefox-glib-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfirefox-gmodule-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfirefox-gobject-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfirefox-gthread-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfreebl3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libfreebl3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libsoftokn3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libsoftokn3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nspr-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nspr-32bit-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nss-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nss-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nss-certs-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nss-certs-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nss-tools-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-branding-SLED-68-21.9.8 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-translations-common-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-translations-other-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-atk-lang-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gdk-pixbuf-lang-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gio-branding-upstream-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-glib2-lang-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-glib2-tools-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-branding-upstream-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-data-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-amharic-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-multipress-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-thai-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodule-xim-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-lang-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-gtk3-tools-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libatk-1_0-0-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libcairo-gobject2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libcairo2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libffi4-5.3.1+r233831-14.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libffi7-3.2.1.git259-2.3.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libgtk-3-0-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libharfbuzz0-1.7.5-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA firefox-libpango-1_0-0-1.40.14-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfirefox-gio-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfirefox-glib-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfirefox-gmodule-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfirefox-gobject-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfirefox-gthread-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfreebl3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libfreebl3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libsoftokn3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libsoftokn3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nspr-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nspr-32bit-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nss-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nss-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nss-certs-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nss-certs-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nss-tools-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-branding-SLED-68-21.9.8 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-translations-common-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-translations-other-68.2.0-78.51.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-atk-lang-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gdk-pixbuf-lang-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gio-branding-upstream-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-glib2-lang-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-glib2-tools-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-branding-upstream-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-data-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-amharic-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-multipress-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-thai-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodule-xim-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-lang-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-gtk3-tools-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libatk-1_0-0-2.26.1-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libcairo-gobject2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libcairo2-1.15.10-2.13.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libffi4-5.3.1+r233831-14.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libffi7-3.2.1.git259-2.3.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libgtk-3-0-3.10.9-2.15.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libharfbuzz0-1.7.5-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS firefox-libpango-1_0-0-1.40.14-2.7.4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfirefox-gio-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfirefox-glib-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfirefox-gmodule-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfirefox-gobject-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfirefox-gthread-2_0-0-2.54.3-2.14.7 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfreebl3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libfreebl3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libsoftokn3-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libsoftokn3-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nspr-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nspr-32bit-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nspr-devel-4.21-29.6.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-certs-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-certs-32bit-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-devel-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mozilla-nss-tools-3.45-38.9.3 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS nasm-2.03.90-2.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 nasm-2.10.09-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 nasm-2.10.09-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 nasm-2.10.09-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 nasm-2.10.09-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack. CVE-2017-10686 SUSE Linux Enterprise Module for Development Tools 15:nasm-2.13.02-1.17 SUSE Linux Enterprise Module for Development Tools 15 SP1:nasm-2.13.02-1.17 SUSE Linux Enterprise Module for Development Tools 15 SP2:nasm-2.13.02-1.17 SUSE Linux Enterprise Module for Development Tools 15 SP3:nasm-2.14.02-3.4.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:nasm-2.14.02-3.4.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:nasm-2.15.05-150500.1.2 SUSE Linux Enterprise Module for Development Tools 15 SP6:nasm-2.15.05-150500.1.2 SUSE Linux Enterprise Module for Development Tools 15 SP7:nasm-2.16.03-150700.1.8 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-branding-SLED-68-21.9.8 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-translations-common-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-translations-other-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-atk-lang-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gdk-pixbuf-lang-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gio-branding-upstream-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-glib2-lang-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-glib2-tools-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-branding-upstream-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-data-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-amharic-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-multipress-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-thai-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodule-xim-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-lang-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-gtk3-tools-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libatk-1_0-0-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libcairo-gobject2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libcairo2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libffi4-5.3.1+r233831-14.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libffi7-3.2.1.git259-2.3.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libgtk-3-0-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libharfbuzz0-1.7.5-2.7.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:firefox-libpango-1_0-0-1.40.14-2.7.4 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfirefox-gio-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfirefox-glib-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfirefox-gmodule-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfirefox-gobject-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfirefox-gthread-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfreebl3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:libfreebl3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:libsoftokn3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:libsoftokn3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nspr-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nspr-32bit-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nss-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nss-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nss-certs-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nss-certs-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nss-tools-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-68-21.9.8 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-common-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-other-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-atk-lang-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gdk-pixbuf-lang-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gio-branding-upstream-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-glib2-lang-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-glib2-tools-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-branding-upstream-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-data-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-amharic-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-multipress-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-thai-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodule-xim-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-lang-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-gtk3-tools-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libatk-1_0-0-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libcairo-gobject2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libcairo2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libffi4-5.3.1+r233831-14.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libffi7-3.2.1.git259-2.3.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libgtk-3-0-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libharfbuzz0-1.7.5-2.7.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:firefox-libpango-1_0-0-1.40.14-2.7.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfirefox-gio-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfirefox-glib-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfirefox-gmodule-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfirefox-gobject-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfirefox-gthread-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfreebl3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:libfreebl3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:libsoftokn3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:libsoftokn3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nspr-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nspr-32bit-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nss-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nss-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nss-certs-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nss-certs-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nss-tools-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-branding-SLED-68-21.9.8 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-68.2.0-78.51.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-atk-lang-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gdk-pixbuf-lang-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gdk-pixbuf-query-loaders-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gdk-pixbuf-thumbnailer-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gio-branding-upstream-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-glib2-lang-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-glib2-tools-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-branding-upstream-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-data-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-amharic-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-inuktitut-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-multipress-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-thai-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-vietnamese-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodule-xim-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-immodules-tigrigna-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-lang-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-gtk3-tools-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libatk-1_0-0-2.26.1-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libcairo-gobject2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libcairo2-1.15.10-2.13.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libffi4-5.3.1+r233831-14.1 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libffi7-3.2.1.git259-2.3.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libgdk_pixbuf-2_0-0-2.36.11-2.8.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libgtk-3-0-3.10.9-2.15.3 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libharfbuzz0-1.7.5-2.7.4 SUSE Linux Enterprise Server 11 SP4-LTSS:firefox-libpango-1_0-0-1.40.14-2.7.4 SUSE Linux Enterprise Server 11 SP4-LTSS:libfirefox-gio-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:libfirefox-glib-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:libfirefox-gmodule-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:libfirefox-gobject-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:libfirefox-gthread-2_0-0-2.54.3-2.14.7 SUSE Linux Enterprise Server 11 SP4-LTSS:libfreebl3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:libfreebl3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:libsoftokn3-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:libsoftokn3-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nspr-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nspr-32bit-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nspr-devel-4.21-29.6.1 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-certs-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-certs-32bit-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-devel-3.45-38.9.3 SUSE Linux Enterprise Server 11 SP4-LTSS:mozilla-nss-tools-3.45-38.9.3 SUSE Linux Enterprise Software Development Kit 11 SP4:nasm-2.03.90-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:nasm-2.10.09-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:nasm-2.10.09-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP4:nasm-2.10.09-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:nasm-2.10.09-4.5.1 moderate 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H