CVE-2012-5667

Severity

44%

Complexity

34%

Confidentiality

106%

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.

CVSS 2.0 Base Score 4.4. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

Gnu Grep

First reported 12 years ago

2013-01-03 11:54:00

Last updated 8 years ago

2016-12-24 02:59:00

Affected Software

Gnu Grep 2.2

2.2

Gnu Grep 2.3

2.3

Gnu Grep 2.4

2.4

Gnu Grep 2.4.1

2.4.1

Gnu Grep 2.4.2

2.4.2

Gnu Grep 2.5

2.5

Gnu Grep 2.5.1

2.5.1

Gnu Grep 2.5.1a

2.5.1

Gnu Grep 2.5.3

2.5.3

Gnu Grep 2.5.4

2.5.4

Gnu Grep 2.6

2.6

Gnu Grep 2.6.1

2.6.1

Gnu Grep 2.6.2

2.6.2

Gnu Grep 2.6.3

2.6.3

Gnu Grep 2.7

2.7

Gnu Grep 2.8

2.8

Gnu Grep 2.9

2.9

References

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91

Patch

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189