CVE-2015-5218

util-linux < 2.27 - Denial of Service via Crafted File in colcrt

Title source: llm

Description

Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.

References (6)

Core 6

Core References

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html

Exploit mailing-list x_refsource_mlist

http://www.spinics.net/lists/util-linux-ng/msg11873.html

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://github.com/kerolasa/lelux-utiliteetit/commit/70e3fcf293c1827a2655a86584ab13075124a8a8

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1259322

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://github.com/kerolasa/lelux-utiliteetit/commit/d883d64d96ab9bef510745d064a351145b9babec

Release Notes, Vendor Advisory x_refsource_confirm

https://www.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes

Scores

EPSS 0.0008

EPSS Percentile 23.1%

Details

CWE

CWE-119

Status published

Products (4)

kernel/util-linux < 2.22

opensuse/opensuse 13.1

opensuse/opensuse 13.2

opensuse_project/leap 42.1

Published Nov 09, 2015

Tracked Since Feb 18, 2026