Bug 1167548 (CVE-2014-9471)
Summary: | CVE-2014-9471 coreutils: memory corruption flaw in parse_datetime() | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Murray McAllister <mmcallis> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED WONTFIX | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | admiller, jrusnack, kdudka, kzak, ooprala, ovasik, pbrady, p, slawomir, twaugh |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-02-17 18:59:49 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1069657, 1167549, 1185947 | ||
Bug Blocks: | 1167550 |
Description
Murray McAllister
2014-11-25 04:51:43 UTC
Created coreutils tracking bugs for this issue: Affects: fedora-all [bug 1167549] I believe this vulnerability was already addressed in F20+ Fedora (e.g. http://pkgs.fedoraproject.org/cgit/coreutils.git/commit/?h=f20 , https://bugzilla.redhat.com/show_bug.cgi?id=1069657 ). I consider this as a corner case - actually the issue is there since 5.3.0 , so RHEL-5+ are affected. That's the primary reason why I fixed that only in F20+. I'm going to close the F20 one as duplicate and keeping the tracking one opened. F19 was not yet fixed, if you believe this is imporant enough to issue a fix for f19, I can do that. Still, RHEL5+ are affected as I said. In coreutils 8.4 (shipped with RHEL5 and 6), this is limited to an indefinite hang and 100% CPU consumption. The affected function in coreutils 8.4 is get_date(). Reproducers: $ touch '--date=TZ="123"345" @1' $ date '--date=TZ="123"345" @1' MITRE assigned CVE-2014-9471 to this issue: http://seclists.org/oss-sec/2015/q1/17 Statement: Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/. |