Vulnerabilities > GNU > Coreutils > 7.6

DATE CVE VULNERABILITY TITLE RISK
2020-01-24 CVE-2015-4042 Integer Overflow or Wraparound vulnerability in GNU Coreutils
Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.
network
low complexity
gnu CWE-190
critical
9.8
2018-01-04 CVE-2017-18018 Race Condition vulnerability in GNU Coreutils
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
local
high complexity
gnu CWE-362
4.7