QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2676

Published: Jul 25, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/

x_refsource_MISC

[oss-security] 20120605 memory allocator upstream patches

mailing-list

x_refsource_MLIST

[oss-security] 20120607 Re: memory allocator upstream patches

mailing-list

x_refsource_MLIST

https://github.com/emeryberger/Hoard/blob/master/NEWS

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.