2 lines
18 KiB
JSON
2 lines
18 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/","defaultStatus":"unaffected","packageName":"coreutils","versions":[{"lessThan":"9.8","status":"affected","version":"7.2","versionType":"semver"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"coreutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:9.5-8.el10_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"coreutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.30-21.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"coreutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.32-41.el9_8","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791371080","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791371069","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791788287","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-bundle","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791970484","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459707","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459711","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-istio-csr-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459759","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1789029076","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-bundle","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791966259","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-trust-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790598593","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cost_management:4::el9"],"defaultStatus":"affected","packageName":"costmanagement/costmanagement-metrics-rhel9-operator","product":"Cost Management 4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1783539156","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-ui-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782756541","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-server-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784821670","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"defaultStatus":"affected","packageName":"insights-proxy/insights-proxy-container-rhel9","product":"Red Hat Insights proxy 1.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782890503","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-gateway-opa-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782501180","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-gateway-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782501200","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-jaeger-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782498923","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-operator-bundle","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782510941","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782501220","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782501196","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-rhel9-operator","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782501195","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/opentelemetry-collector-rhel9","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785704636","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"defaultStatus":"affected","packageName":"rhosdt/opentelemetry-rhel9-operator","product":"Red Hat OpenShift distributed tracing 3.10.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1785704547","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-kubernetes-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784794818","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784794778","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/haproxy-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784795112","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784794289","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1784795076","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-kubernetes-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787241211","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787135742","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787241260","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"coreutils","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unknown","packageName":"coreutils","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-llama-stack-k8s-operator-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data."},{"lang":"es","value":"Se encontró una falla en GNU Coreutils. La función begfield() de la utilidad sort es vulnerable a una lectura insuficiente del búfer del montón. El programa puede acceder a memoria fuera del búfer asignado si un usuario ejecuta un comando manipulado con el formato de clave tradicional. Una entrada maliciosa podría provocar un fallo o la filtración de datos confidenciales."}],"id":"CVE-2025-5278","lastModified":"2026-11-06T08:17:16.323","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":2.5,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-5278","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-28T13:46:35.101788Z","version":"2.0.3"}}]},"published":"2025-05-27T21:15:23.197","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:28911"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:33124"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:33313"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:33612"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:34102"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:39981"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:44481"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:46836"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:50205"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:58981"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:69964"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:72502"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82304"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82322"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82347"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82354"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82372"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82857"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:82888"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2025-5278"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368764"},{"source":"secalert@redhat.com","url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"},{"source":"secalert@redhat.com","url":"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/05/27/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/05/29/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/05/29/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security-tracker.debian.org/tracker/CVE-2025-5278"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|