QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2675

Published: Jul 25, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/

x_refsource_MISC

https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000

x_refsource_CONFIRM

[oss-security] 20120605 memory allocator upstream patches

mailing-list

x_refsource_MLIST

[oss-security] 20120607 Re: memory allocator upstream patches

mailing-list

x_refsource_MLIST

https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1

x_refsource_CONFIRM

https://github.com/ned14/nedmalloc/blob/master/Readme.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.