Every CVESearch/Get API key

CVE-2012-2673

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and...

5.0 MediumFix available

CVE-2012-2673 is a medium vulnerability (CVSS 5.0) in Boehm-demers-weiser Garbage Collector, published July 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. Fixed in libgc 1:7.1-9.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.77%EPSS, 86th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1:7.1-9libgc +18 more

Description

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Exploit likelihood

2.77%Up 0.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libgc
Debian:12
before 1:7.1-9
1:7.1-9
libgc
Debian:13
before 1:7.1-9
1:7.1-9
libgc
Debian:14
before 1:7.1-9
1:7.1-9
gc
Red Hat:enterprise_linux:6::client
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::client
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::client
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::computenode
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::computenode
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::server
before 0:7.1-12.el6_4
0:7.1-12.el6_4
Show 9 moreShow less
Affected packages
PackageAffectedFixed
gc-debuginfo
Red Hat:enterprise_linux:6::server
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::server
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::workstation
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::workstation
before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:network_satellite:5.6::el5
before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc-debuginfo
Red Hat:network_satellite:5.6::el5
before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc
Red Hat:network_proxy:5.6::el5
before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc-debuginfo
Red Hat:network_proxy:5.6::el5
before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat

What each source reports

NVD Score used5.0

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
Updated
2026-11-02
EUVDEUVD-2012-2655No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
EUVD-2012-2655
Updated
2026-11-03
GitHub AdvisoriesGHSA-779g-vf77-jgjvNo score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and...

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
GHSA-779g-vf77-jgjv
Updated
2026-11-02
OSVNo score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
Updated
2026-11-02
OSVDEBIAN-CVE-2012-2673No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
DEBIAN-CVE-2012-2673
Updated
2026-11-02
OSVopenSUSE-SU-2024:10302-1No score

gc-devel-7.4.2-3.5 on GA media

These are all security issues fixed in the gc-devel-7.4.2-3.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10302-1
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 24 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open