PT-2000-1998 · Gnu · G+++1

Publicado 2000-11-01 · Atualizado 2008-09-05 · CVE-2000-1219

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gcc versions 3.3.3 and earlier g++ versions 3.3.3 and earlier

Description The issue is related to the -ftrapv compiler option in gcc and g++ which does not handle all types of integer overflows. This may leave applications vulnerable to issues related to overflows.

Recommendations For gcc versions 3.3.3 and earlier, consider updating the compiler to a newer version that properly handles integer overflows. For g++ versions 3.3.3 and earlier, consider updating the compiler to a newer version that properly handles integer overflows.

Correção

Identificadores relacionados

CVE-2000-1219

Produtos afetados

G++

Gcc

Referências · 6

• http://kb.cert.org/vuls/id/540517 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2000-1219 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2000-1219 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2000-1219 · Aviso do Fabricante
• http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1219 · Nota de Segurança