grep: Integer overflow leading to heap-based buffer-overflow when reading large lines

🗓️ 20 Jul 2015 14:43:55Reported by RedHatType

Integer overflow in grep when parsing large lines can cause heap overflow, crashing, or code execution when a user opens a crafted data file on Unix.

Reporter	Title	Published	Views	Family All 45
0day.today	Grep < 2.11 Integer Overflow Crash PoC	31 Dec 201200:00	–	zdt
0day.today	Grep <2.11 INT overflow, DoS, CMD Execution	30 Dec 201200:00	–	zdt
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU grep utility affect IBM Security Network Protection (CVE-2012-5667, and CVE-2015-1345)	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU grep affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2015-1345, CVE-2012-5667)	17 Jun 201822:32	–	ibm
IBM Security Bulletins	Security Bulletin: Grep vulnerabilities affect IBM SmartCloud Entry (CVE-2012-5667)	19 Jul 202000:49	–	ibm
Amazon	Low: grep	22 Sep 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : grep (ALAS-2015-598)	23 Sep 201500:00	–	nessus
Tenable Nessus	CentOS 6 : grep (CESA-2015:1447)	28 Jul 201500:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Grep vulnerability (K69662152)	29 Jun 201700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	i686	grep	0:2.20-3.el6	grep-0:2.20-3.el6.i686.rpm
Red Hat Enterprise Linux	6	ppc64	grep	0:2.20-3.el6	grep-0:2.20-3.el6.ppc64.rpm
Red Hat Enterprise Linux	6	s390x	grep	0:2.20-3.el6	grep-0:2.20-3.el6.s390x.rpm
Red Hat Enterprise Linux	6	x86_64	grep	0:2.20-3.el6	grep-0:2.20-3.el6.x86_64.rpm
Red Hat Enterprise Linux	6	i686	grep-debuginfo	0:2.20-3.el6	grep-debuginfo-0:2.20-3.el6.i686.rpm
Red Hat Enterprise Linux	6	ppc64	grep-debuginfo	0:2.20-3.el6	grep-debuginfo-0:2.20-3.el6.ppc64.rpm
Red Hat Enterprise Linux	6	s390x	grep-debuginfo	0:2.20-3.el6	grep-debuginfo-0:2.20-3.el6.s390x.rpm
Red Hat Enterprise Linux	6	x86_64	grep-debuginfo	0:2.20-3.el6	grep-debuginfo-0:2.20-3.el6.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2012-5667
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-5667
cve	www.cve.org/CVERecord

21 Nov 2025 17:53Current

7.8High risk

Vulners AI Score7.8

CVSS 24.4

EPSS0.01022