Description
Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00089.html ↗
- https://github.com/ivmai/bdwgc/issues/135 ↗
- http://www.securityfocus.com/bid/94407 ↗
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00115.html ↗
- http://www.openwall.com/lists/oss-security/2016/11/18/3 ↗
- https://lists.debian.org/debian-lts-announce/2022/03/msg00039.html ↗