CVE-2013-0222

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
redhatenterprise_linux
6.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
coreutils
bookworm
9.1-1
fixed
bullseye
8.32-4
fixed
sid
9.5-1
fixed
trixie
9.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
coreutils
hardy
not-affected
lucid
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
coreutils
suse enterprise sap 12 SP5
8.25-13.7.1
fixed
suse enterprise server 12 SP2
8.25-12.8
fixed
suse enterprise server 12 SP3
8.25-12.8
fixed
suse enterprise server 12 SP4
8.25-13.7.1
fixed
suse enterprise server 12 SP5
8.25-13.7.1
fixed
coreutils-lang
suse enterprise sap 12 SP5
8.25-13.7.1
fixed
suse enterprise server 12 SP2
8.25-12.8
fixed
suse enterprise server 12 SP3
8.25-12.8
fixed
suse enterprise server 12 SP4
8.25-13.7.1
fixed
suse enterprise server 12 SP5
8.25-13.7.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
coreutils
RHEL 6
0:8.4-31.el6
fixed
coreutils-libs
RHEL 6
0:8.4-31.el6
fixed