CVE

Id
60170  
CVE No.
CVE-2013-0223  
Status
Candidate  
Description
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607352 60170 CVE-2013-0223 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=798541  View
607353 60170 CVE-2013-0223 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=903466  View
607354 60170 CVE-2013-0223 CONFIRM:https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19  View
607355 60170 CVE-2013-0223 REDHAT:RHSA-2013:1652  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20150 JVNDB-2013-001725 32-bit Xen paravirt_ops プラットフォーム上で稼働する Linux Kernel における権限を取得される脆弱性 32-bit Xen paravirt_ops プラットフォーム上で稼働する Linux Kernel の arch/x86/xen/xen-asm_32.S 内の xen_iret 関数は、DS セグメントレジスタ内の不正な値を適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2013-0228 60170 6.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001725.html  View