Vulnerability Details : CVE-2013-4332
Potential exploit
Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.
Vulnerability category: Denial of service
Products affected by CVE-2013-4332
- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.13:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.11.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.12.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.16:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.15:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.14.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.17:*:*:*:*:*:*:*
Threat overview for CVE-2013-4332
Top countries where our scanners detected CVE-2013-4332
Top open port discovered on systems with this issue
53
IPs affected by CVE-2013-4332 16,885
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2013-4332!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2013-4332
0.84%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 73 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-4332
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2013-4332
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-4332
-
http://www.ubuntu.com/usn/USN-1991-1
USN-1991-1: GNU C Library vulnerabilities | Ubuntu security notices
-
http://secunia.com/advisories/55113
Sign in
-
https://sourceware.org/bugzilla/show_bug.cgi?id=15856
15856 – valloc integer overflow can corrupt allocator state (CVE-2013-4332)
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:284
mandriva.com
-
https://security.gentoo.org/glsa/201503-04
GNU C Library: Multiple vulnerabilities (GLSA 201503-04) — Gentoo security
-
https://sourceware.org/bugzilla/show_bug.cgi?id=15855
15855 – (CVE-2013-4332) pvalloc integer overflow can corrupt allocator state (CVE-2013-4332)Exploit
-
http://www.openwall.com/lists/oss-security/2013/09/12/6
oss-security - Re: CVE Request: Three integer overflows in glibc memory allocatorPatch
-
https://sourceware.org/bugzilla/show_bug.cgi?id=15857
15857 – posix_memalign / memalign integer overflow can corrupt allocator state (CVE-2013-4332)Exploit
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
mandriva.com
-
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4332
1007545 – (CVE-2013-4332) CVE-2013-4332 glibc: three integer overflows in memory allocator
-
http://rhn.redhat.com/errata/RHSA-2013-1605.html
RHSA-2013:1605 - Security Advisory - Red Hat Customer Portal
-
http://www.securityfocus.com/bid/62324
GNU glibc Multiple Integer Overflow Vulnerabilities
-
http://rhn.redhat.com/errata/RHSA-2013-1411.html
RHSA-2013:1411 - Security Advisory - Red Hat Customer Portal
Jump to