NVD

Id
44391  
Name
CVE-2012-2673  
Description
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-25  
Modified Date
2016-09-28  
Seq
2012-2673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222690 44391 CVE-2012-2673 http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/  View
222691 44391 CVE-2012-2673 FEDORA-2012-9556  View
222692 44391 CVE-2012-2673 FEDORA-2012-9637  View
222693 44391 CVE-2012-2673 RHSA-2013:1500  View
222694 44391 CVE-2012-2673 RHSA-2014:0149  View
222695 44391 CVE-2012-2673 RHSA-2014:0150  View
222696 44391 CVE-2012-2673 MDVSA-2012:158  View
222697 44391 CVE-2012-2673 [oss-security] 20120605 memory allocator upstream patches  View
222698 44391 CVE-2012-2673 [oss-security] 20120607 Re: memory allocator upstream patches  View
222699 44391 CVE-2012-2673 54227  View
222700 44391 CVE-2012-2673 USN-1546-1  View
222701 44391 CVE-2012-2673 https://github.com/ivmai/bdwgc/blob/master/ChangeLog  View
222702 44391 CVE-2012-2673 https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3  View
222703 44391 CVE-2012-2673 https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb  View
222704 44391 CVE-2012-2673 https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1  View
222705 44391 CVE-2012-2673 https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27680 JVNDB-2012-003387 Boehm-Demers-Weiser GC における整数オーバーフローの脆弱性 Boehm-Demers-Weiser GC (libgc) の以下の関数には、整数オーバーフローの脆弱性が存在します。 CVE-2012-2673 55911 CVE-2012-2673 44391 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003387.html 2012-07-25 2012-09-14 View