libgfortran CVE-2014-5044 Multiple Unspecified Integer Overflow Vulnerabilities

Bugtraq ID:	68870
Class:	Unknown
CVE:	CVE-2014-5044
Remote:	Yes
Local:	No
Published:	Jun 17 2014 12:00AM
Updated:	Jun 17 2014 12:00AM
Credit:	Janne Blomqvist
Vulnerable:	libgfortran libgfortran 0
Not Vulnerable:

libgfortran CVE-2014-5044 Multiple Unspecified Integer Overflow Vulnerabilities

libgfortran is prone to multiple unspecified integer-overflow vulnerabilities.

Successfully exploiting these issues may result in the execution of arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

libgfortran CVE-2014-5044 Multiple Unspecified Integer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libgfortran CVE-2014-5044 Multiple Unspecified Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libgfortran CVE-2014-5044 Multiple Unspecified Integer Overflow Vulnerabilities

References:

• CVE-2014-5044 gcc: integer overflow flaws in libgfortran (Red Hat)
  
• Introduce xmallocarray, an overflow checking variant of xmalloc. (GCC)
  
• Bug 1122812 -CVE-2014-5044 gcc: integer overflow flaws in libgfortran (Red Hat Bugzilla)