CVE-2012-2673

gc: malloc() and calloc() overflows

Published Jul 25, 2012 CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Description
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-2655 Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Ubuntu USN Ubuntu USN USN-1546-1 libgc vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:42 PM
Reserved
May 14, 2012, 12:00 AM
Status
Modified
Published
Jul 25, 2012, 7:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Moderate
Public date
Jun 5, 2012, 12:00 AM