CVE-2013-0221
Red Hat Enterprise Linux - Denial of Service via Long String to sort Command with -d or -M Switch
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-0221. PoCs published by anonymous.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in GNU Coreutils' sort utility by feeding it an excessively long input string, leading to a segmentation fault. The PoC confirms the vulnerability but does not achieve arbitrary code execution.
Description
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in GNU Coreutils' sort utility by feeding it an excessively long input string, leading to a segmentation fault. The PoC confirms the vulnerability but does not achieve arbitrary code execution.