14 results · Feed
-
Low 1.8
Heap-based Buffer Overflow in GNU coreutils
GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an unde…
-
Medium 4.6
Out‑of‑bounds Read in GNU coreutils
GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer i…
-
Medium 4.4
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious inpu…
-
Medium 5.5CVE-2024-0684 Public exploit
Coreutils: heap overflow in split --line-bytes with very long lines
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
-
Medium 5.5
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local…
-
High 7.1
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a syml…
-
Medium 5.1
-
Medium 4.6
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TI…
-
Unscored —
The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly e…
-
Unscored —
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a …
-
Unscored —
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwri…
-
Unscored —
Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m swi…
-
Unscored —
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or …
-
Unscored —CVE-2003-0854 Public exploit
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, …