GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-2473-1 (UBUNTU-CVE-2009-4135)

    Vulnerability from osv_ubuntu – Published: 2015-01-14 23:27 – Updated: 2026-02-10 04:40 – Source website
    VLAI
    Summary
    coreutils vulnerabilities
    Details

    It was discovered that the distcheck rule in dist-check.mk in GNU coreutils allows local users to gain privileges via a symlink attack on a directory tree under /tmp. This issue only affected Ubuntu 10.04 LTS. (CVE-2009-4135)

    Bertrand Jacquin and Fiedler Roman discovered date and touch incorrectly handled user-supplied input. An attacker could possibly use this to cause a denial of service or potentially execute code. (CVE-2014-9471)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2014-9471",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "coreutils",
            "binary_version": "8.21-1ubuntu5.1"
          },
          {
            "binary_name": "mktemp",
            "binary_version": "8.21-1ubuntu5.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "coreutils",
        "purl": "pkg:deb/ubuntu/coreutils@8.21-1ubuntu5.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.21-1ubuntu5.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.20-3ubuntu5",
        "8.21-1ubuntu3",
        "8.21-1ubuntu4",
        "8.21-1ubuntu5"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that the distcheck rule in dist-check.mk in GNU\ncoreutils allows local users to gain privileges via a symlink attack\non a directory tree under /tmp. This issue only affected Ubuntu 10.04 LTS.\n(CVE-2009-4135)\n\nBertrand Jacquin and Fiedler Roman discovered date and touch incorrectly\nhandled user-supplied input. An attacker could possibly use this to cause\na denial of service or potentially execute code. (CVE-2014-9471)\n",
  "id": "USN-2473-1",
  "modified": "2026-02-10T04:40:51Z",
  "published": "2015-01-14T23:27:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2473-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2009-4135"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2014-9471"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "coreutils vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2009-4135",
    "UBUNTU-CVE-2014-9471"
  ]
}