CVE-2016-9427Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Bdwgc

Severity
9.8CRITICALNVD
NVD8.8OSV8.8
EPSS
3.1%
top 13.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 12
Latest updateMay 17

Description

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages7 packages

debiandebian/w3m< w3m 0.5.3-30 (bookworm)
debiandebian/libgc< libgc 1:7.6.4-0.3 (bookworm)
Debiantats/w3m< 0.5.3-30+3
NVDtats/w3m0.5.3-30

Also affects: Debian Linux 9.0

Patches

🔴Vulnerability Details

4
GHSA
GHSA-r3r3-3c87-427g: An issue was discovered in the Tatsuya Kinoshita w3m fork before 02022-05-17
GHSA
GHSA-mg78-4mqg-2c9m: Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and2022-05-13
OSV
CVE-2016-9426: An issue was discovered in the Tatsuya Kinoshita w3m fork before 02016-12-12
OSV
CVE-2016-9427: Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and2016-12-12

📋Vendor Advisories

5
Ubuntu
libgc vulnerability2017-02-15
Red Hat
gc: Integer overflow in GC_MALLOC_ATOMIC2016-08-21
Red Hat
w3m: Heap corruption due to integer overflow in renderTable()2016-08-19
Debian
CVE-2016-9426: w3m - An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integ...2016
Debian
CVE-2016-9427: libgc - Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to ca...2016

💬Community

3
Bugzilla
CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC [fedora-all]2016-11-29
Bugzilla
CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC2016-11-29
Bugzilla
CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC [epel-5]2016-11-29