Lucene search
PRIOn knowledge basePRION:CVE-2012-3509HistorySep 05, 2012 - 11:55 p.m.
Integer overflow
2012-09-0523:55:00
PRIOn knowledge base
www.prio-n.com
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the “addition of CHUNK_HEADER_SIZE to the length,” which triggers a heap-based buffer overflow.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.10 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 10.04 | |
| debian_linux | eq | 7.0 | |
| binutils | eq | 2.22 |
References
gcc.gnu.org/bugzilla/show_bug.cgi?id=54411
gcc.gnu.org/ml/gcc-patches/2012-08/msg01986.html
security-tracker.debian.org/tracker/CVE-2012-3509
www.mandriva.com/security/advisories?name=MDVSA-2015:029
www.openwall.com/lists/oss-security/2012/08/29/3
www.securityfocus.com/bid/55281
www.ubuntu.com/usn/USN-2496-1
exchange.xforce.ibmcloud.com/vulnerabilities/78135
Related
nessus
nessus
Fedora 17 : insight-7.4.50-4.20120403cvs.fc17 (2012-18311)
2012-11-26 00:00:00
Fedora 19 : sdcc-3.3.0-1.fc19 (2014-8528)
2014-08-04 00:00:00
Debian DLA-324-1 : binutils security update
2015-10-02 00:00:00
openvas
openvas
Fedora Update for sdcc FEDORA-2014-8528
2014-08-05 00:00:00
Fedora Update for insight FEDORA-2012-18300
2012-11-26 00:00:00
Fedora Update for insight FEDORA-2012-18300
2012-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: insight-7.4.50-4.20120403cvs.fc17
2012-11-24 03:33:49
[SECURITY] Fedora 19 Update: sdcc-3.3.0-1.fc19
2014-08-01 06:05:16
[SECURITY] Fedora 16 Update: insight-7.4.50-4.20120403cvs.fc16
2012-11-24 03:32:00
ubuntucve
ubuntucve
CVE-2012-3509
2012-09-05 00:00:00
cvelist
cvelist
CVE-2012-3509
2012-09-05 23:00:00
debian
debian
[SECURITY] [DLA 324-1] binutils security update
2015-10-02 02:02:41
cve
cve
CVE-2012-3509
2012-09-05 23:55:01
mageia
mageia
Updated sdcc packages fix a security vulnerability
2014-08-22 14:58:14
osv
osv
binutils - security update
2015-10-02 00:00:00
nvd
nvd
CVE-2012-3509
2012-09-05 23:55:01
debiancve
debiancve
CVE-2012-3509
2012-09-05 23:55:01
ubuntu
ubuntu
GNU binutils vulnerabilities
2015-02-09 00:00:00