Lucene search
HistoryNov 23, 2013 - 6:55 p.m.
CVE-2013-0223
suse
coreutils
gnu
denial of service
segmentation fault
buffer overflow
cve-2013-0223
6.5 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
44.2%
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.
References
Social References
More
Related
debiancve
debiancve
CVE-2013-0223
2013-11-23 18:55:00
prion
prion
Stack overflow
2013-11-23 18:55:00
cvelist
cvelist
CVE-2013-0223
2013-11-23 18:00:00
ubuntucve
ubuntucve
CVE-2013-0223
2013-11-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2013-0223 affecting package coreutils 8.30-8
2020-11-30 19:30:46
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:59:11
Denial Of Service (DoS)
2019-05-02 04:59:11
nessus
nessus
Oracle Linux 6 : coreutils (ELSA-2013-1652)
2013-11-27 00:00:00
F5 Networks BIG-IP : SUSE coreutils vulnerabilities (SOL16859)
2015-09-14 00:00:00
openSUSE Security Update : coreutils (openSUSE-SU-2013:0233-1)
2014-06-13 00:00:00
securityvulns
securityvulns
sort, uniq, join utilities resources exhaustion
2013-03-24 00:00:00
[ MDVSA-2013:023 ] coreutils
2013-03-24 00:00:00
openvas
openvas
Fedora Update for coreutils FEDORA-2013-1455
2013-02-04 00:00:00
RedHat Update for coreutils RHSA-2013:1652-02
2013-11-21 00:00:00
Oracle: Security Advisory (ELSA-2013-1652)
2015-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: coreutils-8.17-8.fc18
2013-02-01 16:28:29
f5
f5
redhat
redhat
(RHSA-2013:1652) Low: coreutils security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
oraclelinux
oraclelinux
coreutils security, bug fix, and enhancement update
2013-11-25 00:00:00
centos
centos
coreutils security update
2013-11-26 13:31:16
amazon
amazon
Low: coreutils
2013-12-11 20:34:00
6.5 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
44.2%
Related for CVE-2013-0223