← CVE Intelligence

CVE-2025-5278

Coreutils: heap buffer under-read in gnu coreutils sort via key specification PUBLISHED

Description (CNA)

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 7.2 before 9.8
Red Hat / Red Hat Enterprise Linux 10unaffected 0:9.5-8.el10_2 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.30-21.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:8.32-41.el9_8 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Cost Management 4unaffected 1783539156 before *
Red Hat / Red Hat Discovery 2unaffected 1782756541 before *
Red Hat / Red Hat Discovery 2unaffected 1784821670 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1782890503 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782501180 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782501200 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782498923 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782510941 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782501220 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782501196 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1782501195 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1785704636 before *
Red Hat / Red Hat OpenShift distributed tracing 3.10.2unaffected 1785704547 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1784794818 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1784794778 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1784795112 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1784794289 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1784795076 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.