CVE-2014-9471

The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

History

No history.

Information

Published : 2015-01-16 16:59

Updated : 2024-02-28 12:20


NVD link : CVE-2014-9471

Mitre link : CVE-2014-9471

CVE.ORG link : CVE-2014-9471


JSON object : View

Products Affected

gnu

  • coreutils

canonical

  • ubuntu_linux