{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "memory corruption flaw in parse_datetime()",
    "tracking": {
      "current_release_date": "2026-08-11T14:03:25+00:00",
      "generator": {
        "date": "2026-08-11T14:03:25+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-9471",
      "initial_release_date": "2014-02-25T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T14:03:25+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.1",
            "product": {
              "name": "Red Hat Enterprise Linux 7.1",
              "product_id": "rhel-7.1.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "coreutils",
            "product": {
              "name": "coreutils",
              "product_id": "coreutils",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/coreutils"
              }
            }
          },
          {
            "category": "product_version",
            "name": "coreutils-debuginfo",
            "product": {
              "name": "coreutils-debuginfo",
              "product_id": "coreutils-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/coreutils-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "coreutils-libs",
            "product": {
              "name": "coreutils-libs",
              "product_id": "coreutils-libs",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/coreutils-libs"
              }
            }
          },
          {
            "category": "product_version",
            "name": "coreutils",
            "product": {
              "name": "coreutils",
              "product_id": "coreutils.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/coreutils?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils as a component of Red Hat Enterprise Linux 7.1",
          "product_id": "rhel-7.1.els:coreutils"
        },
        "product_reference": "coreutils",
        "relates_to_product_reference": "rhel-7.1.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:coreutils"
        },
        "product_reference": "coreutils",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:coreutils-debuginfo"
        },
        "product_reference": "coreutils-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-libs as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:coreutils-libs"
        },
        "product_reference": "coreutils-libs",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:coreutils.src"
        },
        "product_reference": "coreutils.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils.src as a component of Red Hat Enterprise Linux 7.1",
          "product_id": "rhel-7.1.els:coreutils.src"
        },
        "product_reference": "coreutils.src",
        "relates_to_product_reference": "rhel-7.1.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:coreutils.src"
        },
        "product_reference": "coreutils.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-9471",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2014-11-24T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:coreutils-debuginfo"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the \"--date=TZ=\"123\"345\" @1\" string to the touch or date command.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-5.11.z.els:coreutils.src",
          "rhel-6-els.els:coreutils",
          "rhel-6-els.els:coreutils-libs",
          "rhel-6-els.els:coreutils.src",
          "rhel-7.1.els:coreutils",
          "rhel-7.1.els:coreutils.src"
        ],
        "known_not_affected": [
          "rhel-6-els.els:coreutils-debuginfo"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-9471"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9471"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-9471"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-5.11.z.els:coreutils.src",
            "rhel-6-els.els:coreutils",
            "rhel-6-els.els:coreutils-libs",
            "rhel-6-els.els:coreutils.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "rhel-7.1.els:coreutils",
            "rhel-7.1.els:coreutils.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore": 2.6
          },
          "products": [
            "rhel-5.11.z.els:coreutils.src",
            "rhel-6-els.els:coreutils",
            "rhel-6-els.els:coreutils-debuginfo",
            "rhel-6-els.els:coreutils-libs",
            "rhel-6-els.els:coreutils.src",
            "rhel-7.1.els:coreutils",
            "rhel-7.1.els:coreutils.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "rhel-5.11.z.els:coreutils.src",
            "rhel-6-els.els:coreutils",
            "rhel-6-els.els:coreutils-debuginfo",
            "rhel-6-els.els:coreutils-libs",
            "rhel-6-els.els:coreutils.src",
            "rhel-7.1.els:coreutils",
            "rhel-7.1.els:coreutils.src"
          ]
        }
      ],
      "title": "memory corruption flaw in parse_datetime()"
    }
  ]
}