REDHAT-BUG-2368764: Medium severity GNU Coreutils vulnerability
The vulnerability occurs in pointer arithmetic when parsing an unusually large key value (UINTMAXMAX) in traditional key syntax (+POS1.C1). If a user executes a crafted command like sort +0.18446744073709551615R, pointer arithmetic may wrap around and return a pointer before the start of the allocated buffer. This flaw can lead to an out-of-bounds memory read and potentially information disclosure.
Affected Versions: GNU Coreutils versions 7.2 through the current version are affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2368764?
The severity of REDHAT-BUG-2368764 is reported as critical due to the potential for memory access violations.
How do I fix REDHAT-BUG-2368764?
To fix REDHAT-BUG-2368764, it is recommended to update GNU Coreutils to the latest version that addresses this vulnerability.
What software is affected by REDHAT-BUG-2368764?
REDHAT-BUG-2368764 affects GNU Coreutils versions from 7.2 up to the current version.
What kind of attacks can be executed using REDHAT-BUG-2368764?
Exploitation of REDHAT-BUG-2368764 can lead to memory corruption, potentially allowing attackers to execute arbitrary code.
What are the symptoms of exploitation of REDHAT-BUG-2368764?
Symptoms of exploitation of REDHAT-BUG-2368764 may include application crashes or unexpected behavior during command execution.