CVE-2014-5044

CRÍTICO 9.8CVE-2014-5044 · Published 07/03/2018 · updated 17/06/2026

En resumen

CVE-2014-5044 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a libgfortran (gnu).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.6%, mayor que el 92.9% de las vulnerabilidades.
Solución: actualizar a 4.8 o posterior.

Package	Affected versions	Patched versions
libgfortran gnu	`< 4.8`	`4.8`

Description

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.

References

openwall.com/lists/oss-security/2014/07/24/1 · Mailing List
openwall.com/lists/oss-security/2014/07/31/6 · Mailing List
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/94849 · Third Party Advisory
gcc.gnu.org/viewcvs/gcc/trunk/libgfortran/ChangeLog · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free