Integer Overflow Vulnerability in GNU Grep by GNU
CVE-2012-5667

Currently unrated

Key Information:

Vendor
Gnu
Status
Vendor
CVE Published:
3 January 2013

Summary

Multiple integer overflow vulnerabilities in GNU Grep versions prior to 2.11 pose a serious threat as they can potentially allow context-dependent attackers to execute arbitrary code. The issue arises when unusually long input lines are processed, resulting in heap-based buffer overflows that can be exploited under specific conditions. This flaw underscores the need for users to secure their systems by updating to the latest versions and following best practices in software maintenance.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.