CVE-2014-3710
NoneCVSS
—
EPSS
14.0%
Published
Nov 5, 2014
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A flaw in how certain programs read special file formats lets attackers send a bad file that makes the program crash.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Improper Input Validation
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The donote function in readelf.c fails to validate the presence of sufficient note headers in ELF files, enabling an out-of-bounds read that crashes the application.
Why it matters to the business
Systems that parse untrusted ELF files experience application crashes, causing service outages and requiring restarts in environments relying on the vulnerable file parsing library.
How an attack unfolds
An attacker creates a specially crafted ELF file missing required note headers and delivers it to a target application or service that uses the vulnerable file command or PHP Fileinfo component for inspection, triggering the crash on processing.
How to fix it
Upgrade the affected file library or PHP installation to a version that enforces proper note header validation. For listed packages apply subversion 1.9.0-1 on Debian 11/12/13 and subversion 1.8.8-1ubuntu3.2 on Ubuntu 14.04 LTS.
How to confirm the fix worked
Confirm the installed file or PHP version is newer than 5.20 and test that crafted ELF files no longer trigger crashes; review changelogs for the donote function fix.
Typical attack path
- Identify a target service or application that processes user-supplied ELF files using the vulnerable library
- Craft a minimal ELF file that omits sufficient note headers
- Deliver the file via upload, email attachment, or network protocol
- Trigger parsing of the file to induce the out-of-bounds read and crash
How to detect it
Review application and system logs for unexpected crashes or segmentation faults during ELF file processing; inspect web server or mail logs for uploads of ELF binaries around crash timestamps.
What your security team should do
- Apply the listed fixed package versions immediately on all affected Debian and Ubuntu systems
- Block or sanitize untrusted ELF file uploads in applications using fileinfo or the file command
- Monitor for application crashes when processing ELF content as a temporary detection measure
The record
The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | file | 0 | 1:5.20-2 |
| Debian:12 | file | 0 | 1:5.20-2 |
| Debian:13 | file | 0 | 1:5.20-2 |
| Debian:6.0 | file | 0 | 5.04-5+squeeze8 |
| Debian:6.0 | php5 | 0 | 5.3.3-7+squeeze23 |
| Debian:7 | file | 0 | 5.11-2+deb7u6 |
| Debian:7 | php5 | 0 | 5.4.35-0+deb7u1 |
| Mageia:3 | file | 0 | 5.12-8.8.mga3 |
| Mageia:3 | php | 0 | 5.4.34-1.1.mga3 |
| Mageia:3 | php-timezonedb | 0 | 2014.9-1.mga3 |
| Mageia:4 | file | 0 | 5.16-1.7.mga4 |
| Mageia:4 | php | 0 | 5.5.18-1.2.mga4 |
| Mageia:4 | php-timezonedb | 0 | 2014.9-1.mga4 |
| Red Hat:enterprise_linux:5::client_workstation | php53 | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-bcmath | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-cli | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-common | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-dba | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-debuginfo | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-devel | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-gd | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-imap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-intl | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-ldap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mbstring | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-mysql | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-odbc | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pdo | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pgsql | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-process | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-pspell | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-snmp | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-soap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xml | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | php53-xmlrpc | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53 | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-bcmath | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-cli | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-common | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-dba | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-debuginfo | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-devel | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-gd | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-imap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-intl | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-ldap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-mbstring | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-mysql | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-odbc | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-pdo | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-pgsql | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-process | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-pspell | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-snmp | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-soap | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-xml | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:5::server | php53-xmlrpc | 0 | 0:5.3.3-26.el5_11 |
| Red Hat:enterprise_linux:6::client | file | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::client | file-debuginfo | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::client | file-devel | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::client | file-libs | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::client | file-static | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::client | php | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-bcmath | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-cli | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-common | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-dba | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-debuginfo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-devel | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-embedded | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-enchant | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-fpm | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-gd | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-imap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-intl | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-ldap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-mbstring | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-mysql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-odbc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-pdo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-pgsql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-process | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-pspell | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-recode | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-snmp | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-soap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-tidy | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-xml | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-xmlrpc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | php-zts | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::client | python-magic | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | file | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | file-debuginfo | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | file-devel | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | file-libs | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | file-static | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::computenode | php | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-bcmath | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-cli | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-common | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-dba | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-debuginfo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-devel | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-embedded | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-enchant | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-fpm | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-gd | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-imap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-intl | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-ldap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-mbstring | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-mysql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-odbc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-pdo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-pgsql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-process | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-pspell | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-recode | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-snmp | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-soap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-tidy | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-xml | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-xmlrpc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | php-zts | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::computenode | python-magic | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | file | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | file-debuginfo | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | file-devel | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | file-libs | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | file-static | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::server | php | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-bcmath | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-cli | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-common | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-dba | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-debuginfo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-devel | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-embedded | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-enchant | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-fpm | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-gd | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-imap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-intl | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-ldap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-mbstring | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-mysql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-odbc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-pdo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-pgsql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-process | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-pspell | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-recode | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-snmp | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-soap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-tidy | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-xml | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-xmlrpc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | php-zts | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::server | python-magic | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | file | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | file-debuginfo | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | file-devel | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | file-libs | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | file-static | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:6::workstation | php | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-bcmath | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-cli | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-common | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-dba | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-debuginfo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-devel | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-embedded | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-enchant | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-fpm | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-gd | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-imap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-intl | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-ldap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-mbstring | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-mysql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-odbc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-pdo | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-pgsql | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-process | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-pspell | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-recode | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-snmp | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-soap | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-tidy | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-xml | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-xmlrpc | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | php-zts | 0 | 0:5.3.3-40.el6_6 |
| Red Hat:enterprise_linux:6::workstation | python-magic | 0 | 0:5.04-30.el6 |
| Red Hat:enterprise_linux:7::client | file | 0 | 0:5.11-31.el7 |
| Red Hat:enterprise_linux:7::client | file-debuginfo | 0 | 0:5.11-31.el7 |
| Red Hat:enterprise_linux:7::client | file-devel | 0 | 0:5.11-31.el7 |
| Red Hat:enterprise_linux:7::client | file-libs | 0 | 0:5.11-31.el7 |
| Red Hat:enterprise_linux:7::client | file-static | 0 | 0:5.11-31.el7 |
| Red Hat:enterprise_linux:7::client | php | 0 | 0:5.4.16-23.el7_0.3 |
| Red Hat:enterprise_linux:7::client | php-bcmath | 0 | 0:5.4.16-23.el7_0.3 |
Related vulnerabilities
- CVE-2015-8865 The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo… Also affects file
- CVE-2014-9620 The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of… Also affects file
- CVE-2014-8117 softmagic.c in file before 5.21 does not properly limit recursion, which allows remote… Also affects file
- CVE-2014-3587 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as… Also affects file
- CVE-2014-3480 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3478 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in… Also affects file
- CVE-2014-3487 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3479 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the… Also affects file