GNU Fileutils vulnerabilities

3 CVEs affecting GNU Fileutils, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0854, published 2003-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0853, published 2003-11-17. Medium severity, CVSS 5.0. EPSS: 11.1% chance of exploitation in the next 30 days. An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited…
CVE-2003-0854, published 2003-11-17. Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days. ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
CVE-2002-0435, published 2002-07-26. Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils…