CVE-2012-2673 Integer overflow in n/a
Integer overflows in libgc allow attackers to trigger buffer overflows and potential code execution by supplying large size values.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-2673?
CVE-2012-2673 is a medium-severity vulnerability in n/a, published on 25 Jul 2012.
Official description
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Weakness: CWE-189
Which versions are affected by CVE-2012-2673?
It affects 1 product.
Linux distribution packages (16)
gc Red Hat:enterprise_linux:6::client | All versions | 0:7.1-12.el6_4 |
gc-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:7.1-12.el6_4 |
gc-devel Red Hat:enterprise_linux:6::client | All versions | 0:7.1-12.el6_4 |
gc Red Hat:enterprise_linux:6::computenode | All versions | 0:7.1-12.el6_4 |
gc-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:7.1-12.el6_4 |
gc-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:7.1-12.el6_4 |
gc Red Hat:enterprise_linux:6::server | All versions | 0:7.1-12.el6_4 |
gc-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:7.1-12.el6_4 |
gc-devel Red Hat:enterprise_linux:6::server | All versions | 0:7.1-12.el6_4 |
gc Red Hat:enterprise_linux:6::workstation | All versions | 0:7.1-12.el6_4 |
gc-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:7.1-12.el6_4 |
gc-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:7.1-12.el6_4 |
gc Red Hat:network_proxy:5.6::el5 | All versions | 0:7.1-12.2.el5sat |
gc-debuginfo Red Hat:network_proxy:5.6::el5 | All versions | 0:7.1-12.2.el5sat |
gc Red Hat:network_satellite:5.6::el5 | All versions | 0:7.1-12.2.el5sat |
gc-debuginfo Red Hat:network_satellite:5.6::el5 | All versions | 0:7.1-12.2.el5sat |
Products include Boehm-Demers-Weiser Garbage Collector.
How do I fix CVE-2012-2673?
Upgrade to a fixed version.
Is CVE-2012-2673 being exploited?
There is no known exploitation of CVE-2012-2673 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2012-2673, GHSA-779g-vf77-jgjv, RHSA-2013:1500, RHSA-2014:0149, RHSA-2014:0150, openSUSE-SU-2024:10302-1.