CVE Feed

    Dashboard / CVE / CVE-2025-5278

    CVE-2025-5278

    A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

    Published:May 27, 2025
    Last Modified:Aug 25, 2026
    EPS:May 27, 2025
    EPSS Score:0.00248
    CVSS Score:4.4

    Affected Products

    Vendor
    Redhat
    Product
    Cost Management
    Vendor
    Redhat
    Product
    Discovery
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Insights Proxy
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Distributed Tracing
    Vendor
    Redhat
    Product
    Rhui

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-18378 (CVSS 7.6) — A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows u…
    CVE-2026-18382 (CVSS 6.8) — A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a…
    CVE-2026-18381 (CVSS 7.6) — A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfi…
    CVE-2026-4878 (CVSS 6.7) — A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race…
    CVE-2026-2100 (CVSS 5.3) — A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey fun…
    CVE-2024-34155 (CVSS 4.3) — Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic d…
    CVE-2024-24791 (CVSS 7.5) — The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-con…
    CVE-2024-24790 (CVSS 9.8) — The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, r…
    CVE-2024-24788 (CVSS 5.9) — A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop…
    CVE-2023-44487 (CVSS 7.5) — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …

    References

    https://access.redhat.com/errata/RHSA-2026:28911
    https://access.redhat.com/errata/RHSA-2026:33124
    https://access.redhat.com/errata/RHSA-2026:33313
    https://access.redhat.com/errata/RHSA-2026:33612
    https://access.redhat.com/errata/RHSA-2026:34102
    https://access.redhat.com/errata/RHSA-2026:39981
    https://access.redhat.com/errata/RHSA-2026:44481
    https://access.redhat.com/errata/RHSA-2026:46836
    https://access.redhat.com/errata/RHSA-2026:50205
    https://access.redhat.com/errata/RHSA-2026:58981
    https://access.redhat.com/security/cve/CVE-2025-5278
    https://bugzilla.redhat.com/show_bug.cgi?id=2368764
    https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507
    http://www.openwall.com/lists/oss-security/2025/05/27/2
    http://www.openwall.com/lists/oss-security/2025/05/29/1
    http://www.openwall.com/lists/oss-security/2025/05/29/2
    https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
    https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14
    https://security-tracker.debian.org/tracker/CVE-2025-5278

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High