Skip to main content

Util Linux CVE-2015-5218

LOW
Buffer Overflow (CWE-119)
2015-11-09 secalert@redhat.com
Denial Of Service Buffer Overflow Util Linux Opensuse Leap
2.1
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:N/A:P
Attack Vector
Local
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Nov 09, 2015 - 16:59 cve.org
LOW 2.1

DescriptionCVE.org

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.

AnalysisAI

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. Affected products include: Kernel Util-Linux, Opensuse, Opensuse Project Leap. Version information: before 2.27.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Util Linux

View all
CVE-2015-5224 CRITICAL
9.8 Aug 23

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name coll
CVE-2021-37600 MEDIUM POC
5.5 Jul 30

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use
CVE-2024-28085 LOW POC
3.3 Mar 27

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to othe
CVE-2014-9114 HIGH
7.8 Mar 31

Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Rated high severity (CVSS 7.8), this v
CVE-2016-2779 HIGH
7.8 Feb 07

runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes

CVE-2018-7738 HIGH
7.8 Mar 07

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands

CVE-2022-0563 MEDIUM
5.5 Feb 21

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. Rated medium severity (C
CVE-2026-27456 MEDIUM
4.7 Apr 03

Unauthorized read access to root-owned files via TOCTOU race condition in util-linux mount binary (versions prior to 2.4
CVE-2016-5011 MEDIUM
4.6 Apr 11

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate at
CVE-2013-0157 LOW
2.1 Jan 21

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the ex

Same weakness CWE-119 – Buffer Overflow

View all
CVE-2017-11882 HIGH POC
7.8
CVE-2014-6332 HIGH POC
8.8
CVE-2023-4966 CRITICAL POC
9.4
CVE-2015-2426 HIGH POC
8.8
CVE-2013-3918 HIGH POC
8.8
CVE-2017-11774 HIGH POC
7.8
CVE-2013-3660 HIGH POC
7.8
CVE-2017-6736 HIGH POC
8.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2015-5218 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy