Lucene search
RedhatCVE-2012-2673HistoryJul 25, 2012 - 7:55 p.m.
CVE-2012-2673
2012-07-2519:55:02
CWE-189
redhat
web.nvd.nist.gov
43
cve-2012-2673
integer overflows
memory-related attacks
buffer overflows
libgc
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.007
Percentile
80.9%
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Affected configurations
Node
boehm-demers-weisergarbage_collectorRange≤7.2alpha6
ORboehm-demers-weisergarbage_collectorMatch1.3
ORboehm-demers-weisergarbage_collectorMatch1.4
ORboehm-demers-weisergarbage_collectorMatch1.5
ORboehm-demers-weisergarbage_collectorMatch1.8
ORboehm-demers-weisergarbage_collectorMatch1.9
ORboehm-demers-weisergarbage_collectorMatch2.0
ORboehm-demers-weisergarbage_collectorMatch2.1
ORboehm-demers-weisergarbage_collectorMatch2.2
ORboehm-demers-weisergarbage_collectorMatch2.3
ORboehm-demers-weisergarbage_collectorMatch2.4
ORboehm-demers-weisergarbage_collectorMatch3.0
ORboehm-demers-weisergarbage_collectorMatch3.1
ORboehm-demers-weisergarbage_collectorMatch3.2
ORboehm-demers-weisergarbage_collectorMatch3.3
ORboehm-demers-weisergarbage_collectorMatch3.4
ORboehm-demers-weisergarbage_collectorMatch3.5
ORboehm-demers-weisergarbage_collectorMatch3.6
ORboehm-demers-weisergarbage_collectorMatch3.7
ORboehm-demers-weisergarbage_collectorMatch4.0
ORboehm-demers-weisergarbage_collectorMatch4.1
ORboehm-demers-weisergarbage_collectorMatch4.2
ORboehm-demers-weisergarbage_collectorMatch4.3
ORboehm-demers-weisergarbage_collectorMatch4.4
ORboehm-demers-weisergarbage_collectorMatch4.5
ORboehm-demers-weisergarbage_collectorMatch4.6
ORboehm-demers-weisergarbage_collectorMatch4.7
ORboehm-demers-weisergarbage_collectorMatch4.8
ORboehm-demers-weisergarbage_collectorMatch4.9
ORboehm-demers-weisergarbage_collectorMatch4.10
ORboehm-demers-weisergarbage_collectorMatch4.11
ORboehm-demers-weisergarbage_collectorMatch4.12
ORboehm-demers-weisergarbage_collectorMatch4.13
ORboehm-demers-weisergarbage_collectorMatch4.14
ORboehm-demers-weisergarbage_collectorMatch4.14alpha1
ORboehm-demers-weisergarbage_collectorMatch4.14alpha2
ORboehm-demers-weisergarbage_collectorMatch5.0
ORboehm-demers-weisergarbage_collectorMatch5.0alpha1
ORboehm-demers-weisergarbage_collectorMatch5.0alpha2
ORboehm-demers-weisergarbage_collectorMatch5.0alpha3
ORboehm-demers-weisergarbage_collectorMatch5.0alpha4
ORboehm-demers-weisergarbage_collectorMatch5.0alpha6
ORboehm-demers-weisergarbage_collectorMatch5.0alpha7
ORboehm-demers-weisergarbage_collectorMatch5.1
ORboehm-demers-weisergarbage_collectorMatch5.2
ORboehm-demers-weisergarbage_collectorMatch5.3
ORboehm-demers-weisergarbage_collectorMatch5.4
ORboehm-demers-weisergarbage_collectorMatch6.0
ORboehm-demers-weisergarbage_collectorMatch6.0alpha1
ORboehm-demers-weisergarbage_collectorMatch6.0alpha2
ORboehm-demers-weisergarbage_collectorMatch6.0alpha3
ORboehm-demers-weisergarbage_collectorMatch6.0alpha4
ORboehm-demers-weisergarbage_collectorMatch6.0alpha5
ORboehm-demers-weisergarbage_collectorMatch6.0alpha6
ORboehm-demers-weisergarbage_collectorMatch6.0alpha7
ORboehm-demers-weisergarbage_collectorMatch6.0alpha8
ORboehm-demers-weisergarbage_collectorMatch6.0alpha9
ORboehm-demers-weisergarbage_collectorMatch6.1
ORboehm-demers-weisergarbage_collectorMatch6.1alpha1
ORboehm-demers-weisergarbage_collectorMatch6.1alpha2
ORboehm-demers-weisergarbage_collectorMatch6.1alpha3
ORboehm-demers-weisergarbage_collectorMatch6.1alpha4
ORboehm-demers-weisergarbage_collectorMatch6.1alpha5
ORboehm-demers-weisergarbage_collectorMatch6.2
ORboehm-demers-weisergarbage_collectorMatch6.2alpha1
ORboehm-demers-weisergarbage_collectorMatch6.2alpha2
ORboehm-demers-weisergarbage_collectorMatch6.2alpha3
ORboehm-demers-weisergarbage_collectorMatch6.2alpha4
ORboehm-demers-weisergarbage_collectorMatch6.2alpha5
ORboehm-demers-weisergarbage_collectorMatch6.2alpha6
ORboehm-demers-weisergarbage_collectorMatch6.3
ORboehm-demers-weisergarbage_collectorMatch6.3alpha1
ORboehm-demers-weisergarbage_collectorMatch6.3alpha2
ORboehm-demers-weisergarbage_collectorMatch6.3alpha3
ORboehm-demers-weisergarbage_collectorMatch6.3alpha4
ORboehm-demers-weisergarbage_collectorMatch6.3alpha5
ORboehm-demers-weisergarbage_collectorMatch6.3alpha6
ORboehm-demers-weisergarbage_collectorMatch6.4
ORboehm-demers-weisergarbage_collectorMatch6.5
ORboehm-demers-weisergarbage_collectorMatch6.6
ORboehm-demers-weisergarbage_collectorMatch6.7
ORboehm-demers-weisergarbage_collectorMatch6.8
ORboehm-demers-weisergarbage_collectorMatch6.9
ORboehm-demers-weisergarbage_collectorMatch7.0
ORboehm-demers-weisergarbage_collectorMatch7.0alpha1
ORboehm-demers-weisergarbage_collectorMatch7.0alpha2
ORboehm-demers-weisergarbage_collectorMatch7.0alpha3
ORboehm-demers-weisergarbage_collectorMatch7.0alpha4
ORboehm-demers-weisergarbage_collectorMatch7.0alpha5
ORboehm-demers-weisergarbage_collectorMatch7.0alpha7
ORboehm-demers-weisergarbage_collectorMatch7.0alpha9
ORboehm-demers-weisergarbage_collectorMatch7.1
ORboehm-demers-weisergarbage_collectorMatch7.1alpha2
ORboehm-demers-weisergarbage_collectorMatch7.2alpha2
ORboehm-demers-weisergarbage_collectorMatch7.2alpha4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| boehm-demers-weiser | garbage_collector | * | cpe:2.3:a:boehm-demers-weiser:garbage_collector:*:alpha6:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 1.3 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:1.3:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 1.4 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:1.4:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 1.5 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:1.5:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 1.8 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:1.8:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 1.9 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:1.9:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 2.0 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:2.0:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 2.1 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:2.1:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 2.2 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:2.2:*:*:*:*:*:*:* |
| boehm-demers-weiser | garbage_collector | 2.3 | cpe:2.3:a:boehm-demers-weiser:garbage_collector:2.3:*:*:*:*:*:*:* |
References
kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html
lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html
rhn.redhat.com/errata/RHSA-2013-1500.html
rhn.redhat.com/errata/RHSA-2014-0149.html
rhn.redhat.com/errata/RHSA-2014-0150.html
www.mandriva.com/security/advisories?name=MDVSA-2012:158
www.openwall.com/lists/oss-security/2012/06/05/1
www.openwall.com/lists/oss-security/2012/06/07/13
www.securityfocus.com/bid/54227
www.ubuntu.com/usn/USN-1546-1
github.com/ivmai/bdwgc/blob/master/ChangeLog
github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3
github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb
github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1
github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a
Related
openvas
openvas
RedHat Update for gc RHSA-2013:1500-01
2013-11-08 00:00:00
CentOS Update for gc CESA-2013:1500 centos6
2013-11-08 00:00:00
Fedora Update for gc FEDORA-2012-9637
2012-06-28 00:00:00
oraclelinux
oraclelinux
gc security update
2013-11-04 00:00:00
debiancve
debiancve
CVE-2012-2673
2012-07-25 19:55:02
veracode
veracode
Denial Of Service
2019-01-15 09:01:28
amazon
amazon
Medium: gc
2013-11-04 14:53:00
nessus
nessus
Fedora 16 : gc-7.2b-2.fc16 (2012-9637)
2012-06-28 00:00:00
RHEL 5 : spacewalk in Satellite Server (RHSA-2014:0149)
2014-11-08 00:00:00
Amazon Linux AMI : gc (ALAS-2013-245)
2013-11-14 00:00:00
nvd
nvd
CVE-2012-2673
2012-07-25 19:55:02
ubuntucve
ubuntucve
CVE-2012-2673
2012-07-25 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: gc-7.2b-2.fc16
2012-06-28 03:44:21
[SECURITY] Fedora 17 Update: gc-7.2b-2.fc17
2012-06-28 03:22:28
prion
prion
Integer overflow
2012-07-25 19:55:00
ubuntu
ubuntu
libgc vulnerability
2012-08-28 00:00:00
centos
centos
gc security update
2013-11-04 19:32:13
redhat
redhat
(RHSA-2014:0150) Moderate: gc security update
2014-02-10 00:00:00
(RHSA-2014:0149) Moderate: gc security update
2014-02-10 00:00:00
(RHSA-2013:1500) Moderate: gc security update
2013-11-04 00:00:00
securityvulns
securityvulns
libgc integer overflows
2012-08-29 00:00:00
cvelist
cvelist
CVE-2012-2673
2012-07-25 19:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.007
Percentile
80.9%
Related for CVE-2012-2673