NVD Vulnerability Detail

CVE-2012-5667

Summary	Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.
Publication Date	Jan. 3, 2013, 8:54 p.m.
Registration Date	Jan. 28, 2021, 3:06 p.m.
Last Update	Nov. 21, 2024, 10:45 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91	Patch
2	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91	Patch
3	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189	Patch
4	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189	Patch
5	http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11
6	http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11
7	http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.html
8	http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.html
9	http://openwall.com/lists/oss-security/2012/12/22/6
10	http://openwall.com/lists/oss-security/2012/12/22/6
11	http://rhn.redhat.com/errata/RHSA-2015-1447.html
12	http://rhn.redhat.com/errata/RHSA-2015-1447.html
13	http://www.securityfocus.com/bid/57033
14	http://www.securityfocus.com/bid/57033
15	https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473
16	https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473
17	https://bugzilla.redhat.com/show_bug.cgi?id=889935
18	https://bugzilla.redhat.com/show_bug.cgi?id=889935

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

JVN Vulnerability Information

GNU Grep おける整数オーバーフローの脆弱性

Title	GNU Grep おける整数オーバーフローの脆弱性
Summary	GNU Grep には、整数オーバーフローの脆弱性が存在します。
Possible impacts	攻撃者により、任意のコードを実行される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Dec. 21, 2012, midnight
Registration Date	Jan. 7, 2013, 4:09 p.m.
Last Update	May 27, 2013, 3:46 p.m.

Affected System

GNU Project

grep 2.11 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-5667	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5667
National Vulnerability Database (NVD)
2	CVE-2012-5667	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5667
SECURITY BLOG
3	CVE-2012-5667 Heap Buffer Overflow vulnerability in GNU Grep	https://blogs.oracle.com/sunsecurity/entry/cve_2012_5667_heap_buffer

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
Bugs
1	Bug #1091473	https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473
GnuPG Project
2	grep.git - 8fcf615	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91
3	grep.git - cbbc1a4	http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189
4	grep.git / shortlog	http://git.savannah.gnu.org/gitweb/?p=grep.git;a=shortlog;h=v2.11
Red Hat Bugzilla
5	Bug 889935	https://bugzilla.redhat.com/show_bug.cgi?id=889935

Change Log

No	Changed Details	Date of change
0	[2013年01月07日] 掲載 [2013年05月27日] ベンダ情報：オラクル (CVE-2012-5667 Heap Buffer Overflow vulnerability in GNU Grep) を追加	Feb. 17, 2018, 10:37 a.m.