Red Hat Security Advisory

RHSA-2013:1652

coreutils security, bug fix, and enhancement update

Released 2013-11-20 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) coreutils-8.4-31.el6, coreutils-libs-8.4-31.el6
Red Hat Enterprise Linux HPC Node (v. 6) coreutils-8.4-31.el6, coreutils-libs-8.4-31.el6
Red Hat Enterprise Linux Server (v. 6) coreutils-8.4-31.el6, coreutils-libs-8.4-31.el6
Red Hat Enterprise Linux Workstation (v. 6) coreutils-8.4-31.el6, coreutils-libs-8.4-31.el6

Fixes 3 records

TI-2013-00155 CVE-2013-0221 · GHSA-x3x5-p66w-97q3

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to…

LOW 30

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07238 Published 2013-11-23 Partial fix CWE-20

TI-2013-00157 CVE-2013-0223 · GHSA-gqm8-m83m-qjfv

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to…

LOW 11

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which trigge…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00507 Published 2013-11-23 Partial fix CWE-119

TI-2013-00156 CVE-2013-0222 · GHSA-833h-pm7q-jw8w

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to…

LOW 11

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer ov…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00384 Published 2013-11-23 Partial fix CWE-119