LWN.net Logo

insight: remote denial of service

Package(s):insight CVE #(s):CVE-2012-3509
Created:November 26, 2012 Updated:November 28, 2012
Description: From the CVE entry:

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.

Alerts:
Fedora FEDORA-2012-18311 2012-11-24
Fedora FEDORA-2012-18300 2012-11-24

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds