CVE-2025-5278
Estado: AplazadaMedia (4.4)—
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
- Puntuación base: 4.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.29%
- Percentil entre todas las CVEs puntuadas: 19
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-121
Referencias
- https://access.redhat.com/errata/RHSA-2026:28911
- https://access.redhat.com/errata/RHSA-2026:33124
- https://access.redhat.com/errata/RHSA-2026:33313
- https://access.redhat.com/errata/RHSA-2026:33612
- https://access.redhat.com/errata/RHSA-2026:34102
- https://access.redhat.com/errata/RHSA-2026:39981
- https://access.redhat.com/errata/RHSA-2026:44481
- https://access.redhat.com/errata/RHSA-2026:46836
- https://access.redhat.com/errata/RHSA-2026:50205
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:69964
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/security/cve/CVE-2025-5278
- https://bugzilla.redhat.com/show_bug.cgi?id=2368764
- https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
- https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507
- http://www.openwall.com/lists/oss-security/2025/05/27/2
- http://www.openwall.com/lists/oss-security/2025/05/29/1
- http://www.openwall.com/lists/oss-security/2025/05/29/2
- https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
- https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14
- https://security-tracker.debian.org/tracker/CVE-2025-5278
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-5278",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-5278",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-05-28T13:46:35.101788Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.4,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"versions": [
{
"status": "affected",
"version": "7.2",
"lessThan": "9.8",
"versionType": "semver"
}
],
"packageName": "coreutils",
"collectionURL": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"versions": [
{
"status": "unaffected",
"version": "0:9.5-8.el10_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "coreutils",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:8.30-21.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "coreutils",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:8.32-41.el9_8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "coreutils",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1.20::el9"
],
"vendor": "Red Hat",
"product": "Cert Manager support for Red Hat OpenShift release 1.20",
"versions": [
{
"status": "unaffected",
"version": "1790598593",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "cert-manager/cert-manager-trust-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:cost_management:4::el9"
],
"vendor": "Red Hat",
"product": "Cost Management 4",
"versions": [
{
"status": "unaffected",
"version": "1783539156",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "1782756541",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-ui-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "1784821670",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Insights proxy 1.5",
"versions": [
{
"status": "unaffected",
"version": "1782890503",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782501180",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-opa-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782501200",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782498923",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-jaeger-query-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782510941",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782501220",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-query-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782501196",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1782501195",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1785704636",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"versions": [
{
"status": "unaffected",
"version": "1785704547",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1784794818",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/cds-kubernetes-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1784794778",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/cds-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1784795112",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/haproxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1784794289",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/installer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1784795076",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/rhua-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1787241211",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/cds-kubernetes-tp-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1787135742",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/installer-tp-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Update Infrastructure 5",
"versions": [
{
"status": "unaffected",
"version": "1787241260",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhui5/rhua-tp-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"packageName": "coreutils",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"packageName": "coreutils",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "openshift/ose-rhel-coreos-8",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
}
]
}
],
"published": "2025-05-27T21:15:23.197",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2026:28911",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:33124",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:33313",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:33612",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:34102",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:39981",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:44481",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:46836",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:50205",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:58981",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:69964",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:72502",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5278",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764",
"source": "secalert@redhat.com"
},
{
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"source": "secalert@redhat.com"
},
{
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/05/27/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/05/29/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/05/29/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2025-5278",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data."
},
{
"lang": "es",
"value": "Se encontró una falla en GNU Coreutils. La función begfield() de la utilidad sort es vulnerable a una lectura insuficiente del búfer del montón. El programa puede acceder a memoria fuera del búfer asignado si un usuario ejecuta un comando manipulado con el formato de clave tradicional. Una entrada maliciosa podría provocar un fallo o la filtración de datos confidenciales."
}
],
"lastModified": "2026-09-29T01:16:43.143",
"sourceIdentifier": "secalert@redhat.com"
}