CVE-2013-4332

Publication date 9 October 2013

Last updated 24 July 2024

Ubuntu priority

Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
eglibc	13.10 saucy	Not affected
	13.04 raring	Fixed 2.17-0ubuntu5.1
	12.10 quantal	Fixed 2.15-0ubuntu20.2
	12.04 LTS precise	Fixed 2.15-0ubuntu10.5
	10.04 LTS lucid	Fixed 2.11.1-0ubuntu7.13

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
eglibc	Upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=1159a193696ad48ec86e5895f6dee3e539619c0e Upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=55e17aadc1ef17a1df9626fb0e9fba290ece3331 Upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=b73ed247781d533628b681f57257dc85882645d3

CVE-2013-4332

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references