coreutils
| Version / range | Status | Type |
|---|---|---|
| 7.2 to before 9.8 | affected | semver |
Threat intelligence dashboard
CVE-2025-5278medium
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
Risk score
4.4
CVSS 3.1
- Vendor
- Red Hat
- Product
- coreutils, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18, Cert Manager support for Red Hat OpenShift release 1.20, Cost Management 4, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.10.1, Red Hat Update Infrastructure 5, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4
- CWE
- CWE-121
- Published
- May 27, 2025
- Updated
- Oct 31, 2026
- CISA KEV
- Not flagged
Affected products and versions
Red Hat Enterprise Linux 10
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 0:9.5-8.el10_2 to before * | unaffected | rpm |
Red Hat Enterprise Linux 8
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 0:8.30-21.el8_10 to before * | unaffected | rpm |
Red Hat Enterprise Linux 9
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 0:8.32-41.el9_8 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.17
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791371080 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.17
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791371069 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.17
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791788287 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.17
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791970484 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.18
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791459707 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.18
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791459711 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.18
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791459759 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.18
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1789029076 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.18
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1791966259 to before * | unaffected | rpm |
Cert Manager support for Red Hat OpenShift release 1.20
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1790598593 to before * | unaffected | rpm |
Cost Management 4
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1783539156 to before * | unaffected | rpm |
Red Hat Discovery 2
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782756541 to before * | unaffected | rpm |
Red Hat Discovery 2
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784821670 to before * | unaffected | rpm |
Red Hat Insights proxy 1.5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782890503 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782501180 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782501200 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782498923 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782510941 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782501220 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782501196 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1782501195 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1785704636 to before * | unaffected | rpm |
Red Hat OpenShift distributed tracing 3.10.1
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1785704547 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784794818 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784794778 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784795112 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784794289 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1784795076 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1787241211 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1787135742 to before * | unaffected | rpm |
Red Hat Update Infrastructure 5
Red Hat
| Version / range | Status | Type |
|---|---|---|
| 1787241260 to before * | unaffected | rpm |
Red Hat Enterprise Linux 6
Red Hat
No affected version range was provided.
Red Hat Enterprise Linux 7
Red Hat
No affected version range was provided.
Red Hat OpenShift Container Platform 4
Red Hat
No affected version range was provided.
Red Hat OpenShift Container Platform 4
Red Hat
No affected version range was provided.
Technical metrics
4.4
CVSS 3.1
- Severity
- medium
- Source
- redhat
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L