CVE-2012-5667
N/A
Published: January 3, 2013 at 11:00 AM UTC
Updated: June 16, 2026 at 11:47 PM UTC
1 product affected across 1 vendorGrep
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (9)
x_refsource_CONFIRMPatch
Source: [email protected]
http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91x_refsource_CONFIRMPatch
Source: [email protected]
http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189x_refsource_CONFIRM
Source: [email protected]
http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11Mailing Listx_refsource_MLIST
Source: [email protected]
http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://openwall.com/lists/oss-security/2012/12/22/6Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2015-1447.htmlx_refsource_CONFIRM
Source: [email protected]
https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473Quick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card