Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-9488
HistoryApr 14, 2015 - 6:59 p.m.

CVE-2014-9488

2015-04-1418:59:02
CWE-119
[email protected]
web.nvd.nist.gov
34
cve-2014-9488
gnu less
remote attackers
malformed utf-8 characters
out-of-bounds read
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.9%

JSON

The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.

Affected configurations

NVD
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
gnulessRange≤471

Related

openvas 10
debiancve 1
nessus 14
mageia 1
fedora 2
nvd 1
cvelist 1
rosalinux 1
prion 1
securityvulns 2
ubuntucve 1
openvas
openvas
Fedora Update for less FEDORA-2015-9357
2015-07-07 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2019-2475)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2020-1238)
2020-03-13 00:00:00
debiancve
debiancve
CVE-2014-9488
2015-04-14 18:59:02
nessus
nessus
EulerOS 2.0 SP3 : less (EulerOS-SA-2019-2602)
2019-12-18 00:00:00
RHEL 7 : less (Unpatched Vulnerability)
2024-06-03 00:00:00
SUSE SLES12 Security Update : less (SUSE-SU-2020:2687-1)
2020-12-09 00:00:00
mageia
mageia
Updated less packages fix CVE-2014-9488
2015-04-10 01:44:14
fedora
fedora
[SECURITY] Fedora 22 Update: less-471-4.fc22
2015-06-05 23:40:53
[SECURITY] Fedora 21 Update: less-471-4.fc21
2015-06-10 19:06:45
nvd
nvd
CVE-2014-9488
2015-04-14 18:59:02
cvelist
cvelist
CVE-2014-9488
2015-04-14 18:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1861
2021-07-02 17:08:28
prion
prion
Out-of-bounds
2015-04-14 18:59:00
securityvulns
securityvulns
less uninitialized memory reference
2015-04-17 00:00:00
[ MDVSA-2015:199 ] less
2015-04-17 00:00:00
ubuntucve
ubuntucve
CVE-2014-9488
2015-04-14 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.9%

JSON
Related for CVE-2014-9488
openvas10debiancve1nessus14mageia1fedora2nvd1cvelist1rosalinux1prion1securityvulns2ubuntucve1