| Package | Affected versions | Patched versions |
|---|---|---|
| garbage collector | = 1.3= 1.4= 1.5= 1.8= 1.9= 2.0= 2.1= 2.2= 2.3= 2.4= 3.0= 3.1= 3.2= 3.3= 3.4= 3.5= 3.6= 3.7= 4.0= 4.1= 4.10= 4.11= 4.12= 4.13= 4.14= 4.2= 4.3= 4.4= 4.5= 4.6= 4.7= 4.8= 4.9= 5.0= 5.1= 5.2= 5.3= 5.4= 6.0= 6.1= 6.2= 6.3= 6.4= 6.5= 6.6= 6.7= 6.8= 6.9= 7.0= 7.1= 7.2≤ 7.2 |
Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free