CVEs-PoC/2025/CVE-2025-5278.md

CVE-2025-5278

Description

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

POC

Reference

• http://www.openwall.com/lists/oss-security/2025/05/27/2

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/Dariani223/DevOpsFinal
• https://github.com/Giovanni26101982/Grupo4_Docker_Tarea3
• https://github.com/Oscar112248/Grupo4_Docker_Tarea3
• https://github.com/PaulJara84/Grupo4_Docker_Tarea3
• https://github.com/TinchoXD/Grupo4_Docker_Tarea3
• https://github.com/edemirtoldo/diferentes-formas-criar-imagens-container
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/oportero/Grupo4_Docker_Tarea3
• https://github.com/z4ng1ew/Trivy-Flask-App-With-Bandit-TruffleHog