CVE-2013-4332: Integer Overflow
Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posixmemalign, (4) memalign, or (5) alignedalloc functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4332?
CVE-2013-4332 has a high severity rating due to its potential for causing denial of service via heap corruption.
How do I fix CVE-2013-4332?
To fix CVE-2013-4332, update the GNU C Library (glibc) to version 2.19 or later.
What are the affected versions for CVE-2013-4332?
CVE-2013-4332 affects GNU C Library versions up to 2.18, including several earlier versions.
What types of vulnerabilities does CVE-2013-4332 exploit?
CVE-2013-4332 exploits integer overflow vulnerabilities in memory allocation functions including pvalloc and posix_memalign.
Who can be affected by CVE-2013-4332?
Context-dependent attackers can leverage CVE-2013-4332 to cause denial of service in applications using the affected versions of glibc.