Description
Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | boost +25 | 1.41.0-15.el6_4 | RHSA-2013:0668 |
| RHEL 5 | boost +2 | 1.33.1-16.el5_9 | RHSA-2013:0668 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | ceph | 18.2.2-1 | — |
| Azure Linux 3 | mysql | 8.0.40-4 | — |
Advisories 2
- RHSA-2013:0668 Red Hat Security Advisory: boost security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2024-0766 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 20, 2024
References
- https://svn.boost.org/trac/boost/changeset/78326
- http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
- [oss-security] 20120605 memory allocator upstream patches mailing-list
- [oss-security] 20120607 Re: memory allocator upstream patches mailing-list
- FEDORA-2012-9818 vendor-advisory
- FEDORA-2012-9029 vendor-advisory
- https://svn.boost.org/trac/boost/ticket/6701
- MDVSA-2013:065 vendor-advisory
- GLSA-202105-04 vendor-advisory