CVE-2013-0223 in GNU Coreutils
Summary
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.
Reservation
12/06/2012
Disclosure
11/23/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7992 | GNU Coreutils Service join memory corruption | 119 | Not defined | Official fix | CVE-2013-0223 |