First published: Thu Jul 24 2014(Updated: )
Multiple integer overflow issues were found in libgfortran, the run-time support library for the Fortran compiler. These could possibly be used to crash a Fortran application or cause it to execute arbitrary code. Upstream fix: <a href="https://gcc.gnu.org/viewcvs/gcc?limit_changes=0&view=revision&revision=211721">https://gcc.gnu.org/viewcvs/gcc?limit_changes=0&view=revision&revision=211721</a> These will be included in a later release of GCC. References: <a href="http://seclists.org/oss-sec/2014/q3/230">http://seclists.org/oss-sec/2014/q3/230</a>
Affected Software | Affected Version | How to fix |
---|---|---|
libgfortran | ||
GNU Compiler Collection (GCC) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-1122812 is high due to potential remote code execution and application crashes.
To fix REDHAT-BUG-1122812, update the libgfortran or GCC packages to the latest patched versions provided by your distribution.
REDHAT-BUG-1122812 affects the GNU libgfortran and GNU Compiler Collection (GCC) software.
REDHAT-BUG-1122812 is associated with multiple integer overflow issues that may lead to application crashes or arbitrary code execution.
Yes, REDHAT-BUG-1122812 can potentially allow for remote code execution if exploited.