CVE-2012-2673 Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) befo...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgc(Debian:12) | < 1:7.1-9 | 1:7.1-9 |
| debian/libgc(Debian:13) | < 1:7.1-9 | 1:7.1-9 |
| debian/libgc(Debian:14) | < 1:7.1-9 | 1:7.1-9 |
| boehm-demers-weiser garbage collector | <= 7.2 | No fix listed |
| boehm-demers-weiser garbage collector | = 1.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 1.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 1.5 | No fix listed |
| boehm-demers-weiser garbage collector | = 1.8 | No fix listed |
| boehm-demers-weiser garbage collector | = 1.9 | No fix listed |
| boehm-demers-weiser garbage collector | = 2.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 2.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 2.2 | No fix listed |
| boehm-demers-weiser garbage collector | = 2.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 2.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.2 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.5 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.6 | No fix listed |
| boehm-demers-weiser garbage collector | = 3.7 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.2 | No fix listed |
Show 73 more
| Product | Affected versions | Fixed in |
|---|---|---|
| boehm-demers-weiser garbage collector | = 4.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.5 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.6 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.7 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.8 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.9 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.10 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.11 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.12 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.13 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.14 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.14-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 4.14-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha6 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.0-alpha7 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.2 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 5.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha5 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha6 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha7 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha8 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.0-alpha9 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.1-alpha5 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha5 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.2-alpha6 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha5 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.3-alpha6 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.4 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.5 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.6 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.7 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.8 | No fix listed |
| boehm-demers-weiser garbage collector | = 6.9 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha1 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha3 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha4 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha5 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha7 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.0-alpha9 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.1 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.1-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.2-alpha2 | No fix listed |
| boehm-demers-weiser garbage collector | = 7.2-alpha4 | No fix listed |
References
- Debian Security Tracker CVE-2012-2673 vendor-advisory
- kqueue.org
- FEDORA-2012-9556 vendor-advisory
- FEDORA-2012-9637 vendor-advisory
- RHSA-2013:1500 vendor-advisory
- RHSA-2014:0149 vendor-advisory
- RHSA-2014:0150 vendor-advisory
- MDVSA-2012:158 vendor-advisory
- [oss-security] 20120605 memory allocator upstream patches mailing-list
- [oss-security] 20120607 Re: memory allocator upstream patches mailing-list
- 54227 vdb-entry
- USN-1546-1 vendor-advisory
- github.com
- github.com exploit patch
- github.com exploit patch
- github.com patch
- github.com patch
- bugs.debian.org issue-tracking