PT-2012-4173 · Google · Bionic

Xi Wang · Publicado 2012-07-25 · Atualizado 2012-08-24 · CVE-2012-2674

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bionic (libc) for Android (affected versions not specified)

Description The issue is related to multiple integer overflows in certain functions within Bionic (libc) for Android. Specifically, the chk malloc, leak malloc, and leak memalign functions in libc/bionic/malloc debug leak.c are affected when libc.debug.malloc is set. This makes it easier for attackers to perform memory-related attacks, such as buffer overflows, by providing a large size value, which results in less memory being allocated than expected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2012-2674

Produtos afetados

Bionic

Referências · 5

• 🔥 https://github.com/android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385 · Exploit
• http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited · Nota
• http://openwall.com/lists/oss-security/2012/06/05/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2674 · Nota de Segurança
• http://openwall.com/lists/oss-security/2012/06/07/13 · Nota