CVE-2015-5218

CWE-119 — Buffer Overflow7 documents7 sources
Severity
2.1LOW
EPSS
0.1%
top 76.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Kernel Util-linuxOpensuse OpensuseOpensuse Project Leap
Timeline
PublishedNov 9
Latest updateMay 14

Description

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages4 packages

▶Debianutil-linux< 2.27-1+3
▶NVDopensuse/opensuse13.1, 13.2+1

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-8f2v-6436-599m: Buffer overflow in text-utils/colcrt↗2022-05-14
▶
CVEList
CVE-2015-5218: Buffer overflow in text-utils/colcrt↗2015-11-09
▶
OSV
CVE-2015-5218: Buffer overflow in text-utils/colcrt↗2015-11-09
▶

📋Vendor Advisories

2
Red Hat
colcrt: global-buffer-overflow↗2015-09-02
▶
Debian
CVE-2015-5218: util-linux - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allow...↗2015
▶

💬Community

1
Bugzilla
CVE-2015-5218 colcrt: global-buffer-overflow↗2015-09-02
▶
CVE-2015-5218 (LOW CVSS 2.1) | Buffer overflow in text-utils/colcr | cvebase.io