A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade coreutils-commonUpgrade coreutils-singleUpgrade coreutils | Jun 25, 2026 | Jun 24, 2026 |
| Amazon_linux_2023 | — | Upgrade coreutils-commonUpgrade coreutils-singleUpgrade coreutilsUpgrade coreutils-debugsourceUpgrade coreutils-debuginfoUpgrade coreutils-single-debuginfo | Sep 30, 2025 | May 27, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 27, 2025 |
| Debian | — | No solution exists | May 29, 2025 | May 27, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade coreutils | Nov 12, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade coreutils | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade coreutils | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade coreutils | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | Upgrade coreutils-debuginfoUpgrade coreutilsUpgrade coreutils-commonUpgrade coreutils-debugsourceUpgrade coreutils-singleUpgrade coreutils-single-debuginfoNo solution exists | Jul 9, 2025 | May 27, 2025 |
| Rocky_linux | — | Upgrade coreutils-commonUpgrade coreutils-single-debuginfoUpgrade coreutils-singleUpgrade coreutils-debugsourceUpgrade coreutilsUpgrade coreutils-debuginfo | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade coreutils-langUpgrade coreutils-singleUpgrade coreutils-docUpgrade coreutils-testsuiteUpgrade coreutils-systemdUpgrade coreutils | Jul 18, 2025 | May 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub