Patchwire CVEs, their patch status, and feeds to follow them

CVE-2003-0854

Fixed in a distro release EPSS 1%

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Published 2003-10-25 · CVE record · OSV

Products: gnu fileutils, washington_university wu-ftpd

Distro releases

ReleasePackageFixed in
Debian 12coreutils5.2.1-1
Debian 13coreutils5.2.1-1
Debian 14coreutils5.2.1-1