Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2016-9427

critical

CVE-2016-9427

gc: Integer overflow in GC_MALLOC_ATOMIC

Published Modified CWE 119, 190
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (medium), Ubuntu (medium).

Description

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.

Affected packages and fixed versions

SourcePackageFixed in
Photon OS 1.0gc7.4.18-1.ph1
debian 11libgc1:7.6.4-0.3
debian 12libgc1:7.6.4-0.3
debian 13libgc1:7.6.4-0.3
debian 14libgc1:7.6.4-0.3
debian 7libgc1:7.1-9.1+deb7u1
debian 8libgcno fix listed
debian 9libgc1:7.4.2-8+deb9u1
echolibgc1:7.6.4-0.3
Red Hatcpp, gc, gc-devel and 25 moreno fix listed
ubuntu 12.04libgc1:7.1-8ubuntu0.12.04.3
ubuntu 14.04libgc1:7.2d-5ubuntu2.1
Show all 43 entries from 16 sources
SourcePackageFixed in
Photon OS 1.0gc7.4.18-1.ph1
debian 11libgc1:7.6.4-0.3
debian 12libgc1:7.6.4-0.3
debian 13libgc1:7.6.4-0.3
debian 14libgc1:7.6.4-0.3
debian 7libgc1:7.1-9.1+deb7u1
debian 8libgcno fix listed
debian 9libgc1:7.4.2-8+deb9u1
echolibgc1:7.6.4-0.3
Red Hatcppno fix listed
Red Hatgcno fix listed
Red Hatgc-develno fix listed
Red Hatgccno fix listed
Red Hatgcc-c++no fix listed
Red Hatgcc-gfortranno fix listed
Red Hatgcc-gnatno fix listed
Red Hatgcc-javano fix listed
Red Hatgcc-objcno fix listed
Red Hatgcc-objc++no fix listed
Red Hatlibatomicno fix listed
Red Hatlibatomic_ops-develno fix listed
Red Hatlibgccno fix listed
Red Hatlibgcjno fix listed
Red Hatlibgcj-develno fix listed
Red Hatlibgcj-srcno fix listed
Red Hatlibgfortranno fix listed
Red Hatlibgnatno fix listed
Red Hatlibgnat-develno fix listed
Red Hatlibgompno fix listed
Red Hatlibitmno fix listed
Red Hatlibmudflapno fix listed
Red Hatlibmudflap-develno fix listed
Red Hatlibobjcno fix listed
Red Hatlibquadmathno fix listed
Red Hatlibstdc++no fix listed
Red Hatlibstdc++-develno fix listed
Red Hatlibstdc++-docsno fix listed
ubuntu 12.04libgc1:7.1-8ubuntu0.12.04.3
ubuntu 14.04libgc1:7.2d-5ubuntu2.1
ubuntu 14.04-ESMlibgc1:7.2d-5ubuntu2.1
ubuntu 16.04libgc1:7.4.2-7.3ubuntu0.1
ubuntu 16.04-ESMlibgc1:7.4.2-7.3ubuntu0.1
ubuntu 16.10libgc1:7.4.2-8ubuntu0.1

References

All 10 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.