Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-etmy-48fm-vudb
Vulnerability ID VCID-etmy-48fm-vudb
Aliases CVE-2015-5218
Summary colcrt: global-buffer-overflow
Status Published
Exploitability 0.5
Weighted Severity 1.9
Risk 0.9
Affected and Fixed Packages Package Details
Weaknesses (1)
Reference id Reference type URL
http://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5218.json
https://api.first.org/data/v1/epss?cve=CVE-2015-5218
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5218
https://github.com/kerolasa/lelux-utiliteetit/commit/70e3fcf293c1827a2655a86584ab13075124a8a8
https://github.com/kerolasa/lelux-utiliteetit/commit/d883d64d96ab9bef510745d064a351145b9babec
https://www.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes
http://www.spinics.net/lists/util-linux-ng/msg11873.html
1259322 https://bugzilla.redhat.com/show_bug.cgi?id=1259322
798067 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798067
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*
CVE-2015-5218 https://nvd.nist.gov/vuln/detail/CVE-2015-5218
No exploits are available.
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2015-5218
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

Exploit Prediction Scoring System (EPSS)
Percentile 0.23167
EPSS Score 0.00078
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:40:05.183116+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5218.json 38.0.0