PT-2015-4239 · Gnu+2 · Less+2

Hanno Böck · Publicado 2015-04-09 · Atualizado 2024-06-15 · CVE-2014-9488

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU less versions prior to 475

Description The issue is related to the is utf8 well formed function, which can be triggered by malformed UTF-8 characters. This leads to an out-of-bounds read, allowing remote attackers to have an unspecified impact.

Recommendations For GNU less versions prior to 475, update to version 475 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2028

CVE-2014-9488

MGASA-2015-0139

OPENSUSE-SU-2024:10183-1

SUSE-SU-2020:2687-1

SUSE-SU-2020_2687-1

Produtos afetados

Alt Linux

Suse

Less

Referências · 27

• https://suse.com/support/update/announcement/2020/suse-su-20202687-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:2687-1 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=15567 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9488 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2014-9488 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2014-9488 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00077.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9488 · Nota
• https://blog.fuzzing-project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html · Nota
• https://osv.dev/vulnerability/MGASA-2015-0139 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2020-September/007445.html · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10183-1 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2014-9488 · Nota
• http://openwall.com/lists/oss-security/2015/03/10/14 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159449.html · Aviso do Fabricante