Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Updated gc packages that fix one security issue are now available for Red Hat Satellite Proxy 5.6.

The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Red Hat Satellite Proxy provides a package-caching mechanism that reduces the bandwidth requirements for Red Hat Satellite and enables custom package deployment. Red Hat Satellite Proxy customers are able to cache RPM packages, such as are provided by Errata Updates from Red Hat, or custom RPM packages generated by their organization, on an internal, centrally-located server.

gc is a Boehm-Demers-Weiser conservative garbage collector for C and C++.

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

Users of Red Hat Network Proxy 5.6 are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For this update to take effect, Red Hat Network Proxy must be restarted. Refer to the Solution section for details.

Updated gc packages that fix one security issue are now available for Red Hat Satellite 5.6.

The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool.

gc is a Boehm-Demers-Weiser conservative garbage collector for C and C++.

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

Users of Red Hat Satellite 5.6 are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For this update to take effect, Red Hat Satellite must be restarted. Refer to the Solution section for details.

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

Applications using gc must be restarted for the update to take effect.

Updated gc packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

gc is a Boehm-Demers-Weiser conservative garbage collector for C and C++.

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

Users of gc are advised to upgrade to these updated packages, which contain backported patches to correct this issue. Applications using gc must be restarted for the update to take effect.

From Red Hat Security Advisory 2013:1500 :

Updated gc packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

gc is a Boehm-Demers-Weiser conservative garbage collector for C and C++.

It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application.
(CVE-2012-2673)

Users of gc are advised to upgrade to these updated packages, which contain backported patches to correct this issue. Applications using gc must be restarted for the update to take effect.

A security issue was identified and fixed in gc :

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc funtions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected (CVE-2012-2673).

The updated packages have been patched to correct this issue.

It was discovered that multiple integer overflows existed in the malloc and calloc implementations in the Boehm-Demers-Weiser garbage collecting memory allocator (libgc). These could allow an attacker to cause a denial of service or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backport upstream fixes for memory allocation related overflows.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backport upstream fixes for memory allocation related overflows

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
78997	RHEL 5 : gc in Satellite Server (RHSA-2014:0150)	Nessus	Red Hat Local Security Checks	medium
78996	RHEL 5 : spacewalk in Satellite Server (RHSA-2014:0149)	Nessus	Red Hat Local Security Checks	medium
70907	Amazon Linux AMI : gc (ALAS-2013-245)	Nessus	Amazon Linux Local Security Checks	medium
70756	Scientific Linux Security Update : gc on SL6.x i386/x86_64 (20131104)	Nessus	Scientific Linux Local Security Checks	medium
70755	RHEL 6 : gc (RHSA-2013:1500)	Nessus	Red Hat Local Security Checks	medium
70754	Oracle Linux 6 : gc (ELSA-2013-1500)	Nessus	Oracle Linux Local Security Checks	medium
70747	CentOS 6 : gc (CESA-2013:1500)	Nessus	CentOS Local Security Checks	medium
62424	Mandriva Linux Security Advisory : gc (MDVSA-2012:158)	Nessus	Mandriva Local Security Checks	medium
61706	Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libgc vulnerability (USN-1546-1)	Nessus	Ubuntu Local Security Checks	medium
59742	Fedora 16 : gc-7.2b-2.fc16 (2012-9637)	Nessus	Fedora Local Security Checks	medium
59739	Fedora 17 : gc-7.2b-2.fc17 (2012-9556)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-2673

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium