Lucene search
Ubuntu.comUB:CVE-2014-9488HistoryApr 14, 2015 - 12:00 a.m.
CVE-2014-9488
2015-04-1400:00:00
ubuntu.com
ubuntu.com
15
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.009 Low
EPSS
Percentile
82.7%
The is_utf8_well_formed function in GNU less before 475 allows remote
attackers to have unspecified impact via malformed UTF-8 characters, which
triggers an out-of-bounds read.
Bugs
Notes
| Author | Note |
|---|---|
| tyhicks | Hanno’s blog post has been updated to say that less 458 is not affected I’ve verified that no stable releases are affected via the reproducers on Hanno’s blog post and valgrind |
Related
nessus
nessus
EulerOS Virtualization 3.0.2.2 : less (EulerOS-SA-2020-2212)
2020-10-21 00:00:00
EulerOS 2.0 SP5 : less (EulerOS-SA-2019-2164)
2019-11-12 00:00:00
EulerOS 2.0 SP3 : less (EulerOS-SA-2019-2602)
2019-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: less-471-4.fc21
2015-06-10 19:06:45
[SECURITY] Fedora 22 Update: less-471-4.fc22
2015-06-05 23:40:53
cve
cve
CVE-2014-9488
2015-04-14 18:59:00
openvas
openvas
Fedora Update for less FEDORA-2015-9357
2015-07-07 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2020-1238)
2020-03-13 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2019-2475)
2020-01-23 00:00:00
debiancve
debiancve
CVE-2014-9488
2015-04-14 18:59:00
cvelist
cvelist
CVE-2014-9488
2015-04-14 18:00:00
mageia
mageia
Updated less packages fix CVE-2014-9488
2015-04-10 01:44:14
prion
prion
Out-of-bounds
2015-04-14 18:59:00
securityvulns
securityvulns
less uninitialized memory reference
2015-04-17 00:00:00
[ MDVSA-2015:199 ] less
2015-04-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1861
2021-07-02 17:08:28
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.009 Low
EPSS
Percentile
82.7%
Related for UB:CVE-2014-9488