Test ID:	1.3.6.1.4.1.25623.1.0.871068
Category:	Red Hat Local Security Checks
Title:	RedHat Update for gc RHSA-2013:1500-01
Summary:	The remote host is missing an update for the 'gc'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'gc' package(s) announced via the referenced advisory. Vulnerability Insight: gc is a Boehm-Demers-Weiser conservative garbage collector for C and C++. It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application. (CVE-2012-2673) Users of gc are advised to upgrade to these updated packages, which contain backported patches to correct this issue. Applications using gc must be restarted for the update to take effect. Affected Software/OS: gc on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2673 54227 http://www.securityfocus.com/bid/54227 FEDORA-2012-9556 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html FEDORA-2012-9637 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html MDVSA-2012:158 http://www.mandriva.com/security/advisories?name=MDVSA-2012:158 RHSA-2013:1500 http://rhn.redhat.com/errata/RHSA-2013-1500.html RHSA-2014:0149 http://rhn.redhat.com/errata/RHSA-2014-0149.html RHSA-2014:0150 http://rhn.redhat.com/errata/RHSA-2014-0150.html USN-1546-1 http://www.ubuntu.com/usn/USN-1546-1 [oss-security] 20120605 memory allocator upstream patches http://www.openwall.com/lists/oss-security/2012/06/05/1 [oss-security] 20120607 Re: memory allocator upstream patches http://www.openwall.com/lists/oss-security/2012/06/07/13 http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ https://github.com/ivmai/bdwgc/blob/master/ChangeLog https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3 https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1 https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.