CVE-2014-9488: Buffer Overflow
Published Apr 14, 2015
·Updated
The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.
Affected Software
3 affected components
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
GNU less<=471
Event History
Apr 14, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9488?
CVE-2014-9488 has a moderate severity level as it allows for potential out-of-bounds reads which can be exploited by attackers.
2
How do I fix CVE-2014-9488?
To fix CVE-2014-9488, upgrade GNU less to version 475 or later.
3
What versions of GNU less are affected by CVE-2014-9488?
GNU less versions prior to 475, specifically up to 471, are affected by CVE-2014-9488.
4
Which operating systems are impacted by CVE-2014-9488?
CVE-2014-9488 impacts openSUSE versions 13.1 and 13.2 along with affected GNU less versions.
5
What are the consequences of exploiting CVE-2014-9488?
Exploiting CVE-2014-9488 can lead to unexpected behavior and may disclose sensitive information due to the out-of-bounds read.