CVE-2014-5044 Integer overflow in n/a
Integer overflows in libgfortran allow remote attackers to execute arbitrary code or crash applications via array allocation vectors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-5044?
CVE-2014-5044 is a critical vulnerability in n/a, published on 7 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
Weakness: CWE-190
Which versions are affected by CVE-2014-5044?
It affects 1 product.
Products include Gnu Libgfortran.
How do I fix CVE-2014-5044?
Apply the vendor's patch.
Is CVE-2014-5044 being exploited?
There is no known exploitation of CVE-2014-5044 in the wild and no public exploit code.
Sources
Also known as GHSA-45pw-v4pc-rq4g, MGASA-2014-0306, UBUNTU-CVE-2014-5044.