Unrated severityNVD Advisory· Published Jan 24, 2020· Updated Aug 6, 2024

CVE-2015-4042

Description

Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Coreutilsdescription
GNU/Coreutilsllm-fuzzy
Range: <=8.23
osv-coords4 versions
pkg:rpm/opensuse/coreutils&distro=openSUSE%20Tumbleweed pkg:rpm/suse/coreutils&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/coreutils&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/coreutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012
< 8.26-1.1+ 3 more
- (no CPE)range: < 8.26-1.1
- (no CPE)range: < 8.22-9.1
- (no CPE)range: < 8.22-9.1
- (no CPE)range: < 8.22-9.1

Patches

Vulnerability mechanics

References

openwall.com/lists/oss-security/2015/05/15/1mitrex_refsource_MISC
github.com/pixelb/coreutils/commit/bea5e36cc876ed627bb5e0eca36fdfaa6465e940mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000