libgc vulnerability

2012-08-2800:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
Ubuntu 8.04

Packages

libgc - Boehm-Demers-Weiser garbage collecting storage allocator library

Details

It was discovered that multiple integer overflows existed in the
malloc and calloc implementations in the Boehm-Demers-Weiser garbage
collecting memory allocator (libgc). These could allow an attacker
to cause a denial of service or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibgc1c2< 1:6.8-1.1ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibgc-dev< 1:6.8-1.1ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibgc1c2< 1:7.1-8ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchlibgc-dev< 1:7.1-8ubuntu0.12.04.1UNKNOWN
Ubuntu11.10noarchlibgc1c2< 1:7.1-8ubuntu0.11.10.1UNKNOWN
Ubuntu11.10noarchlibgc-dev< 1:7.1-8ubuntu0.11.10.1UNKNOWN
Ubuntu11.04noarchlibgc1c2< 1:6.8-1.2ubuntu3.2UNKNOWN
Ubuntu11.04noarchlibgc-dev< 1:6.8-1.2ubuntu3.2UNKNOWN
Ubuntu10.04noarchlibgc1c2< 1:6.8-1.2ubuntu1.1UNKNOWN
Ubuntu10.04noarchlibgc-dev< 1:6.8-1.2ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libgc1c2	< 1:6.8-1.1ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libgc-dev	< 1:6.8-1.1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libgc1c2	< 1:7.1-8ubuntu0.12.04.1	UNKNOWN
Ubuntu	12.04	noarch	libgc-dev	< 1:7.1-8ubuntu0.12.04.1	UNKNOWN
Ubuntu	11.10	noarch	libgc1c2	< 1:7.1-8ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.10	noarch	libgc-dev	< 1:7.1-8ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.04	noarch	libgc1c2	< 1:6.8-1.2ubuntu3.2	UNKNOWN
Ubuntu	11.04	noarch	libgc-dev	< 1:6.8-1.2ubuntu3.2	UNKNOWN
Ubuntu	10.04	noarch	libgc1c2	< 1:6.8-1.2ubuntu1.1	UNKNOWN
Ubuntu	10.04	noarch	libgc-dev	< 1:6.8-1.2ubuntu1.1	UNKNOWN