CVE-2014-9471
Description
The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the --date=TZ=123345 @1 string to the touch or date command.
Risk Information
Base Score
10.0
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score
Exploitation Probability
8.474
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| GNU core utilities (USN-2473-1) coreutils_8.13-3ubuntu3.3_i386.deb | Linux |
| GNU core utilities (USN-2473-1) coreutils_8.13-3ubuntu3.3_amd64.deb | Linux |
| GNU core utilities (USN-2473-1) coreutils_8.21-1ubuntu5.1_i386.deb | Linux |
| GNU core utilities (USN-2473-1) coreutils_8.21-1ubuntu5.1_amd64.deb | Linux |
| SUSE-SU-2015:0792-1(SUSE Linux Enterprise Desktop 11 SP3 ) coreutils-8.12-6.25.32.33.1.x86_64.rpm | Linux |
| SUSE-SU-2015:0792-1(SUSE Linux Enterprise Desktop 11 SP3 ) coreutils-lang-8.12-6.25.32.33.1.x86_64.rpm | Linux |
| CVE-2014-9471 | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234