CVE-2012-3509 in GNU libiberty
Summary
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.
Reservation
06/14/2012
Disclosure
09/05/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62025 | GNU libiberty objalloc.c _objalloc_alloc numeric error | 189 | Not defined | Not defined | CVE-2012-3509 |