Every CVE Search/ Get API key

CVE-2008-7177

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown...

9.3 HighFix available

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Exploit likelihood

2.39%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
CVE-2008-7177
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
CVE-2008-7177
Updated
2026-11-02
EUVDEUVD-2008-7136 No score

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
EUVD-2008-7136
Updated
2026-11-03
GitHub AdvisoriesGHSA-wx92-p8m2-phh4 No score

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown...

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
GHSA-wx92-p8m2-phh4
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
CVE-2008-7177
Updated
2026-11-02
OSVDEBIAN-CVE-2008-7177 No score

Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.

Record
DEBIAN-CVE-2008-7177
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nasm
Debian:12
before 2.03.01-1
2.03.01-1
nasm
Debian:13
before 2.03.01-1
2.03.01-1
nasm
Debian:14
before 2.03.01-1
2.03.01-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-7177 is a high vulnerability (CVSS 9.3) in Nasm Netwide Assembler, published September 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.39%, the 84th percentile. Fixed in nasm 2.03.01-1.

References

Show 5 moreShow less
MoveEnter Open