5

CVE-2012-3509

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Binutils Version >= 2.22 < 2.24
Gnu ≫ Libiberty Version-
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Debian ≫ Debian Linux Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.6% 0.88
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411
Issue Tracking
http://gcc.gnu.org/ml/gcc-patches/2012-08/msg01986.html
Patch
Vendor Advisory
http://security-tracker.debian.org/tracker/CVE-2012-3509
Third Party Advisory
Issue Tracking
http://www.mandriva.com/security/advisories?name=MDVSA-2015:029
Broken Link
http://www.openwall.com/lists/oss-security/2012/08/29/3
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/55281
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2496-1
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78135
Third Party Advisory