CVE-2014-9474

🗓️ 09 Oct 2017 14:00:00Reported by mitreType

Buffer overflow in mpfr_strtofr function in GNU MPFR before 3.1.2-p11, allows context-dependent attackers to have impact via vectors related to incorrect documentation for mpn_set_str

Reporter	Title	Published	Views	Family All 47
CNVD	MPFR 'strtofr.c' Buffer Overflow Vulnerability	13 Oct 201700:00	–	cnvd
Cvelist	CVE-2014-9474	9 Oct 201714:00	–	cvelist
Debian CVE	CVE-2014-9474	9 Oct 201714:00	–	debiancve
Oracle linux	mpfr security update	8 Jul 202500:00	–	oraclelinux
Tenable Nessus	EulerOS 2.0 SP1 : mpfr (EulerOS-SA-2017-1293)	12 Dec 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : mpfr (EulerOS-SA-2017-1294)	1 Dec 201700:00	–	nessus
Tenable Nessus	Fedora 20 : mpfr-3.1.2-5.fc20 (2014-16964)	8 Jan 201500:00	–	nessus
Tenable Nessus	Fedora 21 : mpfr-3.1.2-8.fc21 (2014-16967)	8 Jan 201500:00	–	nessus
Tenable Nessus	GLSA-201512-06 : MPFR: User-assisted execution of arbitrary code	4 Jan 201600:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : mpfr (MDVSA-2015:025)	16 Jan 201500:00	–	nessus

NVD

Node

mpfr gnu_mpfrRange≤3.1.2p10

Source	Link
mpfr	www.mpfr.org/mpfr-3.1.2/patch11
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-January/147745.html
gforge	www.gforge.inria.fr/scm/viewvc.php/mpfr
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html
security	www.security.gentoo.org/glsa/201512-06
openwall	www.openwall.com/lists/oss-security/2015/01/03/12
gmplib	www.gmplib.org/list-archives/gmp-bugs/2013-December/003267.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/71542

13 May 2026 00:24Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 39.8

EPSS0.04159

CWE-119