CVE-2015-4042

Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
gnucoreutils
𝑥
≤ 8.23
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
coreutils
bookworm
9.1-1
fixed
bullseye
8.32-4
fixed
sid
9.5-1
fixed
trixie
9.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
coreutils
precise
not-affected
trusty
not-affected
utopic
ignored
vivid
ignored
wily
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
coreutils
suse enterprise desktop 15
8.29-2.12
fixed
suse enterprise desktop 15 SP1
8.29-2.12
fixed
suse enterprise desktop 15 SP2
8.29-2.12
fixed
suse enterprise desktop 15 SP3
8.32-1.2
fixed
suse enterprise desktop 15 SP4
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP5
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise desktop 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise sap 12
8.22-9.1
fixed
suse enterprise sap 12 SP5
8.25-13.7.1
fixed
suse enterprise sap 15
8.29-2.12
fixed
suse enterprise sap 15 SP1
8.29-2.12
fixed
suse enterprise sap 15 SP2
8.29-2.12
fixed
suse enterprise sap 15 SP3
8.32-1.2
fixed
suse enterprise sap 15 SP4
8.32-150400.7.5
fixed
suse enterprise sap 15 SP5
8.32-150400.7.5
fixed
suse enterprise sap 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise sap 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise server 12
8.22-9.1
fixed
suse enterprise server 12 SP2
8.25-12.8
fixed
suse enterprise server 12 SP3
8.25-12.8
fixed
suse enterprise server 12 SP4
8.25-13.7.1
fixed
suse enterprise server 12 SP5
8.25-13.7.1
fixed
suse enterprise server 15
8.29-2.12
fixed
suse enterprise server 15 SP1
8.29-2.12
fixed
suse enterprise server 15 SP2
8.29-2.12
fixed
suse enterprise server 15 SP3
8.32-1.2
fixed
suse enterprise server 15 SP4
8.32-150400.7.5
fixed
suse enterprise server 15 SP5
8.32-150400.7.5
fixed
suse enterprise server 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise server 15 SP7
8.32-150400.9.6.1
fixed
coreutils-doc
suse enterprise desktop 15 SP4
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP5
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise desktop 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise sap 15 SP4
8.32-150400.7.5
fixed
suse enterprise sap 15 SP5
8.32-150400.7.5
fixed
suse enterprise sap 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise sap 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise server 15 SP4
8.32-150400.7.5
fixed
suse enterprise server 15 SP5
8.32-150400.7.5
fixed
suse enterprise server 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise server 15 SP7
8.32-150400.9.6.1
fixed
coreutils-lang
suse enterprise desktop 15
8.29-2.12
fixed
suse enterprise desktop 15 SP1
8.29-2.12
fixed
suse enterprise desktop 15 SP2
8.29-2.12
fixed
suse enterprise desktop 15 SP3
8.32-1.2
fixed
suse enterprise desktop 15 SP4
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP5
8.32-150400.7.5
fixed
suse enterprise desktop 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise desktop 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise sap 12
8.22-9.1
fixed
suse enterprise sap 12 SP5
8.25-13.7.1
fixed
suse enterprise sap 15
8.29-2.12
fixed
suse enterprise sap 15 SP1
8.29-2.12
fixed
suse enterprise sap 15 SP2
8.29-2.12
fixed
suse enterprise sap 15 SP3
8.32-1.2
fixed
suse enterprise sap 15 SP4
8.32-150400.7.5
fixed
suse enterprise sap 15 SP5
8.32-150400.7.5
fixed
suse enterprise sap 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise sap 15 SP7
8.32-150400.9.6.1
fixed
suse enterprise server 12
8.22-9.1
fixed
suse enterprise server 12 SP2
8.25-12.8
fixed
suse enterprise server 12 SP3
8.25-12.8
fixed
suse enterprise server 12 SP4
8.25-13.7.1
fixed
suse enterprise server 12 SP5
8.25-13.7.1
fixed
suse enterprise server 15
8.29-2.12
fixed
suse enterprise server 15 SP1
8.29-2.12
fixed
suse enterprise server 15 SP2
8.29-2.12
fixed
suse enterprise server 15 SP3
8.32-1.2
fixed
suse enterprise server 15 SP4
8.32-150400.7.5
fixed
suse enterprise server 15 SP5
8.32-150400.7.5
fixed
suse enterprise server 15 SP6
8.32-150400.9.3.1
fixed
suse enterprise server 15 SP7
8.32-150400.9.6.1
fixed