NVD

Id
44395  
Name
CVE-2012-2677  
Description
Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-07-25  
Modified Date
2013-12-05  
Seq
2012-2677  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222720 44395 CVE-2012-2677 http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/  View
222721 44395 CVE-2012-2677 FEDORA-2012-9029  View
222722 44395 CVE-2012-2677 FEDORA-2012-9818  View
222723 44395 CVE-2012-2677 MDVSA-2013:065  View
222724 44395 CVE-2012-2677 [oss-security] 20120605 memory allocator upstream patches  View
222725 44395 CVE-2012-2677 [oss-security] 20120607 Re: memory allocator upstream patches  View
222726 44395 CVE-2012-2677 https://svn.boost.org/trac/boost/changeset/78326  View
222727 44395 CVE-2012-2677 https://svn.boost.org/trac/boost/ticket/6701  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27684 JVNDB-2012-003391 Boost Pool の boost/pool/pool.hpp における整数オーバーフローの脆弱性 Boost Pool の boost/pool/pool.hpp 内の ordered_malloc 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2012-2677 55915 CVE-2012-2677 44395 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003391.html 2012-05-04 2012-09-04 View