Multiple integer overflows in the (1) malloc and (2) calloc...

Vulnerability Description

Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected.

References

• http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
• http://www.openwall.com/lists/oss-security/2012/06/05/1
• http://www.openwall.com/lists/oss-security/2012/06/07/13
• https://github.com/emeryberger/Hoard/blob/master/NEWS