Lucene search

K
cve[email protected]CVE-2012-2676
HistoryJul 25, 2012 - 7:55 p.m.

CVE-2012-2676

2012-07-2519:55:02
CWE-189
web.nvd.nist.gov
21
cve-2012-2676
integer overflows
malloc
calloc
hoard
memory-related attacks
buffer overflows
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected.

Affected configurations

NVD
Node
emery_bergerhoardRange3.8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

Related for CVE-2012-2676