PT-2018-11815 · Google+2 · Gperftools+2

Fcorleone · Published 2018-07-07 · Updated 2024-08-05 · CVE-2018-13420

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Google gperftools version 2.7

Description The issue is related to a memory leak in malloc extension.cc, specifically involving MallocExtension::Register and InitModule. However, the software maintainer disputes this, stating it is a false-positive report from the LeakSanitizer program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

ALT-PU-2021-4846

AZL-6453

CVE-2018-13420

ECHO-9C50-798A-C0AF

Affected Products

Alt Linux

Debian

Gperftools

References · 9

• https://osv.dev/vulnerability/CVE-2018-13420 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13420 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13420 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-13420 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-13420 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13420 · Security Note
• https://osv.dev/vulnerability/AZL-6453 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13420 · Vendor Advisory
• https://github.com/gperftools/gperftools/issues/1013 · Note