CVE - CVE-2012-2673

CVE-ID
CVE-2012-2673	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:54227 URL:http://www.securityfocus.com/bid/54227 MISC:FEDORA-2012-9556 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html MISC:FEDORA-2012-9637 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html MISC:MDVSA-2012:158 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:158~~ (Obsolete source) MISC:RHSA-2013:1500 URL:http://rhn.redhat.com/errata/RHSA-2013-1500.html MISC:RHSA-2014:0149 URL:http://rhn.redhat.com/errata/RHSA-2014-0149.html MISC:RHSA-2014:0150 URL:http://rhn.redhat.com/errata/RHSA-2014-0150.html MISC:USN-1546-1 URL:http://www.ubuntu.com/usn/USN-1546-1 MISC:[oss-security] 20120605 memory allocator upstream patches URL:http://www.openwall.com/lists/oss-security/2012/06/05/1 MISC:[oss-security] 20120607 Re: memory allocator upstream patches URL:http://www.openwall.com/lists/oss-security/2012/06/07/13 MISC:http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ URL:http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ MISC:https://github.com/ivmai/bdwgc/blob/master/ChangeLog URL:https://github.com/ivmai/bdwgc/blob/master/ChangeLog MISC:https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3 URL:https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3 MISC:https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb URL:https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb MISC:https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1 URL:https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1 MISC:https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a URL:https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a
Assigning CNA
Red Hat, Inc.
Date Record Created
20120514	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120514)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.