5
CVE-2006-7252
- EPSS 1.1%
- Veröffentlicht 25.07.2012 19:55:01
- Zuletzt bearbeitet 16.06.2026 22:34:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which triggers a memory allocation of one byte.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.1% | 0.614 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
http://svnweb.freebsd.org/base?view=revision&revision=161263