CVE-2012-2675 - Vulnerability Details - OpenCVE

Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nedprod	Nedmalloc

Configuration 1 [-]

cpe:2.3:a:nedprod:nedmalloc:*:beta1:*:*:*:*:*:*

No data.

References

Link	Providers
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
http://www.openwall.com/lists/oss-security/2012/06/05/1
http://www.openwall.com/lists/oss-security/2012/06/07/13
https://github.com/ned14/nedmalloc/blob/master/Readme.html
https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000
https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-07-25T19:00:00Z

Updated: 2024-09-16T18:59:18.022Z

Reserved: 2012-05-14T00:00:00Z

Link: CVE-2012-2675

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-07-25T19:55:02.867

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-2675

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-07-25T19:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000"}, {"name": "[oss-security] 20120605 memory allocator upstream patches", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/06/05/1"}, {"name": "[oss-security] 20120607 Re: memory allocator upstream patches", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/06/07/13"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ned14/nedmalloc/blob/master/Readme.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-2675", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/", "refsource": "MISC", "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"name": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000", "refsource": "CONFIRM", "url": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000"}, {"name": "[oss-security] 20120605 memory allocator upstream patches", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/06/05/1"}, {"name": "[oss-security] 20120607 Re: memory allocator upstream patches", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/06/07/13"}, {"name": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1", "refsource": "CONFIRM", "url": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1"}, {"name": "https://github.com/ned14/nedmalloc/blob/master/Readme.html", "refsource": "CONFIRM", "url": "https://github.com/ned14/nedmalloc/blob/master/Readme.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:42:31.585Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000"}, {"name": "[oss-security] 20120605 memory allocator upstream patches", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/06/05/1"}, {"name": "[oss-security] 20120607 Re: memory allocator upstream patches", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/06/07/13"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ned14/nedmalloc/blob/master/Readme.html"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-2675", "datePublished": "2012-07-25T19:00:00Z", "dateReserved": "2012-05-14T00:00:00Z", "dateUpdated": "2024-09-16T18:59:18.022Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nedprod:nedmalloc:*:beta1:*:*:*:*:*:*", "matchCriteriaId": "30A22E9F-0282-4078-80F5-68C814BFF1C6", "versionEndIncluding": "1.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de enteros en el (1) CallMalloc (malloc) y (2) nedpcalloc (calloc) funciones en nedmalloc (nedmalloc.c) anterior a v1.10 beta2 hacen m\u00e1s f\u00e1cil para los atacantes dependientes de contexto para llevar a cabo los ataques relacionados con la memoria tales como desbordamientos de b\u00fafer a trav\u00e9s de un valor de tama\u00f1o grande, lo que provoca menos memoria que se asignar\u00e1n de lo esperado."}], "id": "CVE-2012-2675", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-07-25T19:55:02.867", "references": [{"source": "secalert@redhat.com", "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/06/05/1"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/06/07/13"}, {"source": "secalert@redhat.com", "url": "https://github.com/ned14/nedmalloc/blob/master/Readme.html"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Patch"], "url": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Patch"], "url": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2012/06/05/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2012/06/07/13"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/ned14/nedmalloc/blob/master/Readme.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}