Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-5667
HistoryJan 03, 2013 - 12:00 a.m.

CVE-2012-5667

2013-01-0300:00:00
ubuntu.com
ubuntu.com
9

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.8%

JSON

Multiple integer overflows in GNU Grep before 2.11 might allow
context-dependent attackers to execute arbitrary code via vectors involving
a long input line that triggers a heap-based buffer overflow.

Bugs

Notes

Author Note
seth-arnold Upstream recommends upgrading to 2.11, but include fixes for two bugs introduced in 2.11, and reverting the -r change. See oss-security/2012/12/22/3 for details. Upgrading to latest release may also make sense.
jdstrand Reproducer for amd64 system (tested with 8G of RAM): perl -e ‘print "x"x(2**31)’

Related

zdt 2
prion 1
debiancve 1
gentoo 1
cve 1
nessus 8
seebug 1
cvelist 1
ibm 4
veracode 2
nvd 1
packetstorm 1
openvas 4
exploitpack 1
f5 1
exploitdb 1
amazon 1
oraclelinux 1
redhat 1
centos 1
zdt
zdt
Grep <2.11 INT overflow, DoS, CMD Execution
2012-12-30 00:00:00
Grep < 2.11 Integer Overflow Crash PoC
2012-12-31 00:00:00
prion
prion
Integer overflow
2013-01-03 11:54:00
debiancve
debiancve
CVE-2012-5667
2013-01-03 11:54:25
gentoo
gentoo
grep: User-assisted execution of arbitrary code
2014-03-26 00:00:00
cve
cve
CVE-2012-5667
2013-01-03 11:54:25
nessus
nessus
F5 Networks BIG-IP : Grep vulnerability (K69662152)
2017-06-29 00:00:00
Oracle Solaris Third-Party Patch Update : grep (cve_2012_5667_heap_buffer)
2015-01-19 00:00:00
GLSA-201403-07 : grep: User-assisted execution of arbitrary code
2014-03-27 00:00:00
seebug
seebug
Grep < 2.11 Integer Overflow Crash PoC
2014-07-01 00:00:00
cvelist
cvelist
CVE-2012-5667
2013-01-03 11:00:00
ibm
ibm
Security Bulletin: Grep vulnerabilities affect IBM SmartCloud Entry (CVE-2012-5667)
2020-07-19 00:49:12
Security Bulletin: Vulnerabilities in GNU grep utility affect IBM Security Network Protection (CVE-2012-5667, and CVE-2015-1345)
2018-06-16 21:38:15
Security Bulletin: Multiple vulnerabilities in GNU grep affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2015-1345, CVE-2012-5667)
2018-06-17 22:32:53
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:06:47
Denial Of Service (DoS) Through Heap Out-of-Bounds (OOB) Read
2019-05-02 05:41:03
nvd
nvd
CVE-2012-5667
2013-01-03 11:54:25
packetstorm
packetstorm
Grep Integer Overflow
2012-12-31 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201403-07
2015-09-29 00:00:00
Oracle: Security Advisory (ELSA-2015-1447)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-598)
2015-09-25 00:00:00
exploitpack
exploitpack
Grep 2.11 - Integer Overflow Crash (PoC)
2012-12-31 00:00:00
f5
f5
K69662152 : Grep vulnerability CVE-2012-5667
2017-06-29 00:00:00
exploitdb
exploitdb
Grep &lt; 2.11 - Integer Overflow Crash (PoC)
2012-12-31 00:00:00
amazon
amazon
Low: grep
2015-09-22 10:00:00
oraclelinux
oraclelinux
grep security, bug fix, and enhancement update
2015-07-28 00:00:00
redhat
redhat
(RHSA-2015:1447) Low: grep security, bug fix, and enhancement update
2015-07-22 00:00:00
centos
centos
grep security update
2015-07-26 14:11:37

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.8%

JSON
Related for UB:CVE-2012-5667
zdt2prion1debiancve1gentoo1cve1nessus8seebug1cvelist1ibm4veracode2nvd1packetstorm1openvas4exploitpack1f51exploitdb1amazon1oraclelinux1redhat1centos1