Integer Overflow Vulnerability in GNU Coreutils Affects Sort Functionality
CVE-2015-4042

9.8CRITICAL

Key Information:

Vendor
Gnu
Status
Coreutils
Vendor
CVE Published:
24 January 2020

Summary

An integer overflow vulnerability has been identified in the keycompare_mb function within the sort component of GNU Coreutils. This flaw, present in versions up to 8.23, enables potential attackers to exploit long string inputs, potentially leading to application crashes or other unspecified impacts. Proper input validation and rigorous testing are essential to mitigate the risks associated with this vulnerability.

References

http://openwall.com/lists/oss-security/2015/05/15/1
x_refsource_MISC
https://github.com/pixelb/coreutils/commit/bea5e36cc876ed...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.