CVE-2012-2673
25.07.2012, 19:55
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.Enginsight
| Vendor | Product | Version |
|---|---|---|
| boehm-demers-weiser | garbage_collector | 𝑥 ≤ 7.2 |
| boehm-demers-weiser | garbage_collector | 1.3 |
| boehm-demers-weiser | garbage_collector | 1.4 |
| boehm-demers-weiser | garbage_collector | 1.5 |
| boehm-demers-weiser | garbage_collector | 1.8 |
| boehm-demers-weiser | garbage_collector | 1.9 |
| boehm-demers-weiser | garbage_collector | 2.0 |
| boehm-demers-weiser | garbage_collector | 2.1 |
| boehm-demers-weiser | garbage_collector | 2.2 |
| boehm-demers-weiser | garbage_collector | 2.3 |
| boehm-demers-weiser | garbage_collector | 2.4 |
| boehm-demers-weiser | garbage_collector | 3.0 |
| boehm-demers-weiser | garbage_collector | 3.1 |
| boehm-demers-weiser | garbage_collector | 3.2 |
| boehm-demers-weiser | garbage_collector | 3.3 |
| boehm-demers-weiser | garbage_collector | 3.4 |
| boehm-demers-weiser | garbage_collector | 3.5 |
| boehm-demers-weiser | garbage_collector | 3.6 |
| boehm-demers-weiser | garbage_collector | 3.7 |
| boehm-demers-weiser | garbage_collector | 4.0 |
| boehm-demers-weiser | garbage_collector | 4.1 |
| boehm-demers-weiser | garbage_collector | 4.2 |
| boehm-demers-weiser | garbage_collector | 4.3 |
| boehm-demers-weiser | garbage_collector | 4.4 |
| boehm-demers-weiser | garbage_collector | 4.5 |
| boehm-demers-weiser | garbage_collector | 4.6 |
| boehm-demers-weiser | garbage_collector | 4.7 |
| boehm-demers-weiser | garbage_collector | 4.8 |
| boehm-demers-weiser | garbage_collector | 4.9 |
| boehm-demers-weiser | garbage_collector | 4.10 |
| boehm-demers-weiser | garbage_collector | 4.11 |
| boehm-demers-weiser | garbage_collector | 4.12 |
| boehm-demers-weiser | garbage_collector | 4.13 |
| boehm-demers-weiser | garbage_collector | 4.14 |
| boehm-demers-weiser | garbage_collector | 4.14:alpha1 |
| boehm-demers-weiser | garbage_collector | 4.14:alpha2 |
| boehm-demers-weiser | garbage_collector | 5.0 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha1 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha2 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha3 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha4 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha6 |
| boehm-demers-weiser | garbage_collector | 5.0:alpha7 |
| boehm-demers-weiser | garbage_collector | 5.1 |
| boehm-demers-weiser | garbage_collector | 5.2 |
| boehm-demers-weiser | garbage_collector | 5.3 |
| boehm-demers-weiser | garbage_collector | 5.4 |
| boehm-demers-weiser | garbage_collector | 6.0 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha1 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha2 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha3 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha4 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha5 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha6 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha7 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha8 |
| boehm-demers-weiser | garbage_collector | 6.0:alpha9 |
| boehm-demers-weiser | garbage_collector | 6.1 |
| boehm-demers-weiser | garbage_collector | 6.1:alpha1 |
| boehm-demers-weiser | garbage_collector | 6.1:alpha2 |
| boehm-demers-weiser | garbage_collector | 6.1:alpha3 |
| boehm-demers-weiser | garbage_collector | 6.1:alpha4 |
| boehm-demers-weiser | garbage_collector | 6.1:alpha5 |
| boehm-demers-weiser | garbage_collector | 6.2 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha1 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha2 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha3 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha4 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha5 |
| boehm-demers-weiser | garbage_collector | 6.2:alpha6 |
| boehm-demers-weiser | garbage_collector | 6.3 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha1 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha2 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha3 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha4 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha5 |
| boehm-demers-weiser | garbage_collector | 6.3:alpha6 |
| boehm-demers-weiser | garbage_collector | 6.4 |
| boehm-demers-weiser | garbage_collector | 6.5 |
| boehm-demers-weiser | garbage_collector | 6.6 |
| boehm-demers-weiser | garbage_collector | 6.7 |
| boehm-demers-weiser | garbage_collector | 6.8 |
| boehm-demers-weiser | garbage_collector | 6.9 |
| boehm-demers-weiser | garbage_collector | 7.0 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha1 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha2 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha3 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha4 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha5 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha7 |
| boehm-demers-weiser | garbage_collector | 7.0:alpha9 |
| boehm-demers-weiser | garbage_collector | 7.1 |
| boehm-demers-weiser | garbage_collector | 7.1:alpha2 |
| boehm-demers-weiser | garbage_collector | 7.2:alpha2 |
| boehm-demers-weiser | garbage_collector | 7.2:alpha4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References