CVE-2014-5044 Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
CriticalCVSS 9.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU libgfortran | < 4.8 | 4.8 |
References
- [oss-security] 20140723 Re: [CVE request] Array allocation fixes in libgfortran mailing-list third-party-advisory
- [oss-security] 20140731 Re: Re: [CVE request] Array allocation fixes in libgfortran mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- libgfortran-cve20145044-overflow(94849) third-party-advisory vdb-entry
- gcc.gnu.org release-notes vendor-advisory