CVE-2012-5667

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.

Affected Software

Name	Vendor	Start Version	End Version
Grep	Gnu	*	2.10 (including)
Grep	Gnu	2.2 (including)	2.2 (including)
Grep	Gnu	2.3 (including)	2.3 (including)
Grep	Gnu	2.4 (including)	2.4 (including)
Grep	Gnu	2.4.1 (including)	2.4.1 (including)
Grep	Gnu	2.4.2 (including)	2.4.2 (including)
Grep	Gnu	2.5 (including)	2.5 (including)
Grep	Gnu	2.5.1 (including)	2.5.1 (including)
Grep	Gnu	2.5.1-a (including)	2.5.1-a (including)
Grep	Gnu	2.5.3 (including)	2.5.3 (including)
Grep	Gnu	2.5.4 (including)	2.5.4 (including)
Grep	Gnu	2.6 (including)	2.6 (including)
Grep	Gnu	2.6.1 (including)	2.6.1 (including)
Grep	Gnu	2.6.2 (including)	2.6.2 (including)
Grep	Gnu	2.6.3 (including)	2.6.3 (including)
Grep	Gnu	2.7 (including)	2.7 (including)
Grep	Gnu	2.8 (including)	2.8 (including)
Grep	Gnu	2.9 (including)	2.9 (including)
Red Hat Enterprise Linux 6	RedHat	grep-0:2.20-3.el6	*
Grep	Ubuntu	hardy	*
Grep	Ubuntu	lucid	*
Grep	Ubuntu	oneiric	*
Grep	Ubuntu	precise	*
Grep	Ubuntu	precise/esm	*
Grep	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-5667
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References