CVE-2013-0221 in GNU Coreutils
Summary
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.
Reservation
12/06/2012
Disclosure
11/23/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7993 | GNU Coreutils sort input validation | 20 | Proof-of-Concept | Official fix | CVE-2013-0221 |