CVE-2000-1219

6 documents6 sources
Severity
7.5HIGH
EPSS
0.8%
top 25.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GNU G\+\+GNU GCC
Timeline
PublishedNov 1
Latest updateApr 30

Description

The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶Debiangcc-3.3< 1:3.3.4-1+1
▶NVDgnu/gcc3.3.3
▶NVDgnu/g\+\+3.3.3

🔴Vulnerability Details

3
GHSA
GHSA-wp4f-j236-w785: The -ftrapv compiler option in gcc and g++ 3↗2022-04-30
▶
CVEList
CVE-2000-1219: The -ftrapv compiler option in gcc and g++ 3↗2005-04-21
▶
OSV
CVE-2000-1219: The -ftrapv compiler option in gcc and g++ 3↗2000-11-01
▶

💥Exploits & PoCs

1
Exploit-DB
Cayman 3220-H DSL Router 1.0/GatorSurf 5.3 - Denial of Service↗2000-05-17
▶

📋Vendor Advisories

1
Debian
CVE-2000-1219: gcc-3.3 - The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all...↗2000
▶
CVE-2000-1219 (HIGH CVSS 7.5) | The -ftrapv compiler option in gcc | cvebase.io