CVE-2015-5218: Buffer Overflow
A flaw was reported in colcrt:
When running colcrt with a big input it crashes because of a global-buffer-overflow caused by a global variable 'page' defined in 'text-utils/colcrt.c:73:9
It is unclear whether this can be used to execute code on the system.
Proposed patches:
https://github.com/kerolasa/lelux-utiliteetit/commit/70e3fcf293c1827a2655a86584ab13075124a8a8 https://github.com/kerolasa/lelux-utiliteetit/commit/d883d64d96ab9bef510745d064a351145b9babec
Other sources
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5218?
The severity of CVE-2015-5218 is not clearly defined, but it involves a global buffer overflow that may lead to crashes.
How do I fix CVE-2015-5218?
To fix CVE-2015-5218, you should upgrade to util-linux version 2.27 or later.
What software is affected by CVE-2015-5218?
CVE-2015-5218 affects versions of util-linux prior to 2.27, as well as specific versions of openSUSE.
Can CVE-2015-5218 be exploited to execute code?
It is unclear whether CVE-2015-5218 can be exploited to execute code on the system.
What is the nature of the flaw in CVE-2015-5218?
The flaw in CVE-2015-5218 is a global buffer overflow that occurs when colcrt is run with large inputs.