Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2025-5278

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

coreutils

Default version status: unaffected

  • 7.2 to < 9.8affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:9.5-8.el10_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:8.30-21.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:8.32-41.el9_8 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.17

Default version status: affected

  • 1791371080 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.17

Default version status: affected

  • 1791371069 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.17

Default version status: affected

  • 1791788287 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.17

Default version status: affected

  • 1791970484 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459707 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459711 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459759 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1789029076 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791966259 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.20

Default version status: affected

  • 1790598593 to < *unaffected

Red Hat Cost Management 4

Default version status: affected

  • 1783539156 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 1782756541 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 1784821670 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1782890503 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782501180 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782501200 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782498923 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782510941 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782501220 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782501196 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1782501195 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1785704636 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.10.2

Default version status: affected

  • 1785704547 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1784794818 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1784794778 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1784795112 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1784794289 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1784795076 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1787241211 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1787135742 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1787241260 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References