PT-2012-4175 · Hoard · Hoard

Xi Wang · Publicado 2012-07-25 · Atualizado 2012-07-30 · CVE-2012-2676

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hoard versions prior to 3.9

Description The issue is related to multiple integer overflows in the malloc and calloc functions, which can be exploited by context-dependent attackers to perform memory-related attacks, such as buffer overflows, by providing a large size value. This causes less memory to be allocated than expected, potentially leading to security issues in implementing code.

Recommendations For versions prior to 3.9, update to version 3.9 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2012-2676

Produtos afetados

Hoard

Referências · 5

• https://github.com/emeryberger/Hoard/blob/master/NEWS · Nota
• http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited · Nota
• http://openwall.com/lists/oss-security/2012/06/05/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2676 · Nota de Segurança
• http://openwall.com/lists/oss-security/2012/06/07/13 · Nota