4.3

CVE-2013-4332

Exploit

Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Glibc Version <= 2.18
Gnu ≫ Glibc Version2.0
Gnu ≫ Glibc Version2.0.1
Gnu ≫ Glibc Version2.0.2
Gnu ≫ Glibc Version2.0.3
Gnu ≫ Glibc Version2.0.4
Gnu ≫ Glibc Version2.0.5
Gnu ≫ Glibc Version2.0.6
Gnu ≫ Glibc Version2.1
Gnu ≫ Glibc Version2.1.1
Gnu ≫ Glibc Version2.1.1.6
Gnu ≫ Glibc Version2.1.2
Gnu ≫ Glibc Version2.1.3
Gnu ≫ Glibc Version2.1.9
Gnu ≫ Glibc Version2.10.1
Gnu ≫ Glibc Version2.11
Gnu ≫ Glibc Version2.11.1
Gnu ≫ Glibc Version2.11.2
Gnu ≫ Glibc Version2.11.3
Gnu ≫ Glibc Version2.12.1
Gnu ≫ Glibc Version2.12.2
Gnu ≫ Glibc Version2.13
Gnu ≫ Glibc Version2.14
Gnu ≫ Glibc Version2.14.1
Gnu ≫ Glibc Version2.15
Gnu ≫ Glibc Version2.16
Gnu ≫ Glibc Version2.17
Redhat ≫ Enterprise Linux Version5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.94% 0.828
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P