GNU coreutils vulnerabilities

The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string.

In GNU coreutils unexpand, a heap-based buffer overflow occurs due to an integer overflow during buffer allocation when processing large -t values. This can lead to out-of-bounds heap write and potentially achieve a heap write primitive.

In the GNU coreutils uniq utility, an out-of-bounds read vulnerability exists due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates byte length by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input, leading to a crash and potential adjacent heap memory exposure.

In GNU Coreutils, the begfield() function in the sort utility is vulnerable to a heap buffer under-read. A crafted command using the traditional key format may access memory outside the allocated buffer.