CVE-2014-9488
Summary
| CVE | CVE-2014-9488 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-04-14 18:59:00 UTC |
| Updated | 2018-10-30 16:27:00 UTC |
| Description | The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Mageia Advisory: MGASA-2015-0139 - Updated less packages fix CVE-2014-9488 | CONFIRM | advisories.mageia.org | |
| [SECURITY] Fedora 22 Update: less-471-4.fc22 | FEDORA | lists.fedoraproject.org | |
| Support / Security / Advisories / / MDVSA-2015:199 | Mandriva | MANDRIVA | www.mandriva.com | |
| openSUSE-SU-2015:0595-1: Security update for less | SUSE | lists.opensuse.org | |
| less out of bounds read access - TFPA 002/2014 | The Fuzzing Project | MISC | blog.fuzzing-project.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 671103 EulerOS Security Update for less (EulerOS-SA-2019-2475)