QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2677

Published: Jul 25, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://svn.boost.org/trac/boost/changeset/78326

x_refsource_CONFIRM

http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/

x_refsource_MISC

[oss-security] 20120605 memory allocator upstream patches

mailing-list

x_refsource_MLIST

[oss-security] 20120607 Re: memory allocator upstream patches

mailing-list

x_refsource_MLIST

FEDORA-2012-9818

vendor-advisory

x_refsource_FEDORA

FEDORA-2012-9029

vendor-advisory

x_refsource_FEDORA

https://svn.boost.org/trac/boost/ticket/6701

x_refsource_CONFIRM

vendor-advisory

x_refsource_MANDRIVA

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.