Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Coreutils 本地拒绝服务漏洞
Vulnerability Description
GNU Coreutils(GNU Core Utilities,GNU核心工具组)是GNU计划开发的一个包含了多个类Unix所需的基本工具的软件包,如textutils(文本工具组)、shellutils(shell工具组)、fileutils(文件工具组)等。 GNU coreutils的‘parse_datetime’函数存在安全漏洞。远程攻击者可借助特制的‘date’字符串利用该漏洞造成拒绝服务(崩溃)或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A