What is CVE-2013-0222?

CVE-2013-0222 is a vulnerability in openSUSE, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-11-23.

Is CVE-2013-0222 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in openSUSE

CVE-2013-0222

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

Affected products

Opensuse — versions 11.4, 12.1, 12.2
Redhat Enterprise_linux — versions 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2013-0222?: CVE-2013-0222 is a vulnerability in openSUSE, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-11-23.
Is CVE-2013-0222 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.