What is CVE-2013-0221?

CVE-2013-0221 is a vulnerability in openSUSE, classified under Improper Input Validation. Published 2013-11-23.

Is CVE-2013-0221 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in openSUSE

CVE-2013-0221

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.

Affected products

Opensuse — versions 12.1, 12.2
Redhat Enterprise_linux — versions 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Issue Tracking)

Frequently asked questions

What is CVE-2013-0221?: CVE-2013-0221 is a vulnerability in openSUSE, classified under Improper Input Validation. Published 2013-11-23.
Is CVE-2013-0221 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.