NVD

Id
39954  
Name
CVE-2013-4332  
Description
Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-09  
Modified Date
2016-11-28  
Seq
2013-4332  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203272 39954 CVE-2013-4332 RHSA-2013:1411  View
203273 39954 CVE-2013-4332 RHSA-2013:1605  View
203274 39954 CVE-2013-4332 MDVSA-2013:283  View
203275 39954 CVE-2013-4332 MDVSA-2013:284  View
203276 39954 CVE-2013-4332 [oss-security] 20130912 Re: CVE Request: Three integer overflows in glibc memory allocator  View
203277 39954 CVE-2013-4332 62324  View
203278 39954 CVE-2013-4332 USN-1991-1  View
203279 39954 CVE-2013-4332 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4332  View
203280 39954 CVE-2013-4332 https://sourceware.org/bugzilla/show_bug.cgi?id=15855  View
203281 39954 CVE-2013-4332 https://sourceware.org/bugzilla/show_bug.cgi?id=15856  View
203282 39954 CVE-2013-4332 https://sourceware.org/bugzilla/show_bug.cgi?id=15857  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23000 JVNDB-2013-004575 GNU C Library の malloc/malloc.c における整数オーバーフローの脆弱性 GNU C Library (別名 glibc または libc6) の malloc/malloc.c には、整数オーバーフローの脆弱性が存在します。 CVE-2013-4332 64274 CVE-2013-4332 39954 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004575.html 2013-08-20 2014-02-18 View