Lucene search
AmazonALAS-2014-304HistoryMar 13, 2014 - 6:12 p.m.
Medium: file
2014-03-1318:12:00
alas.aws.amazon.com
15
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.058 Low
EPSS
Percentile
93.3%
Issue Overview:
Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
Affected Packages:
file
Issue Correction:
Run yum update file to update your system.
New Packages:
i686:
file-debuginfo-5.11-13.14.amzn1.i686
file-devel-5.11-13.14.amzn1.i686
file-static-5.11-13.14.amzn1.i686
file-5.11-13.14.amzn1.i686
file-libs-5.11-13.14.amzn1.i686
noarch:
python-magic-5.11-13.14.amzn1.noarch
src:
file-5.11-13.14.amzn1.src
x86_64:
file-debuginfo-5.11-13.14.amzn1.x86_64
file-5.11-13.14.amzn1.x86_64
file-static-5.11-13.14.amzn1.x86_64
file-devel-5.11-13.14.amzn1.x86_64
file-libs-5.11-13.14.amzn1.x86_64
Additional References
Red Hat: CVE-2014-1943
Mitre: CVE-2014-1943
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | file-debuginfo | < 5.11-13.14.amzn1 | file-debuginfo-5.11-13.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | file-devel | < 5.11-13.14.amzn1 | file-devel-5.11-13.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | file-static | < 5.11-13.14.amzn1 | file-static-5.11-13.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | file | < 5.11-13.14.amzn1 | file-5.11-13.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | file-libs | < 5.11-13.14.amzn1 | file-libs-5.11-13.14.amzn1.i686.rpm |
| Amazon Linux | 1 | noarch | python-magic | < 5.11-13.14.amzn1 | python-magic-5.11-13.14.amzn1.noarch.rpm |
| Amazon Linux | 1 | x86_64 | file-debuginfo | < 5.11-13.14.amzn1 | file-debuginfo-5.11-13.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | file | < 5.11-13.14.amzn1 | file-5.11-13.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | file-static | < 5.11-13.14.amzn1 | file-static-5.11-13.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | file-devel | < 5.11-13.14.amzn1 | file-devel-5.11-13.14.amzn1.x86_64.rpm |
Related
checkpoint_advisories
checkpoint_advisories
PHP Fileinfo Call Stack Exhaustion Denial of Service (CVE-2014-1943)
2014-05-18 00:00:00
nessus
nessus
Fedora 19 : file-5.11-12.fc19 (2014-2876)
2014-03-04 00:00:00
Fedora 20 : file-5.14-15.fc20 (2014-2739)
2014-02-24 00:00:00
FreeBSD : file -- denial of service (815dbcf9-a2d6-11e3-8088-002590860428)
2014-03-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
debian
debian
[SECURITY] [DSA 2861-1] file security update
2014-02-16 14:10:06
[SECURITY] [DSA 2868-1] php5 security update
2014-03-02 19:18:49
[SECURITY] [DSA 2868-1] php5 security update
2014-03-02 19:19:10
osv
osv
file - denial of service
2014-02-16 00:00:00
php5 - denial of service
2014-03-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.14-15.fc20
2014-02-23 08:38:00
[SECURITY] Fedora 19 Update: file-5.11-12.fc19
2014-03-04 06:44:00
[SECURITY] Fedora 20 Update: file-5.14-17.fc20
2014-03-12 12:31:06
openvas
openvas
Debian Security Advisory DSA 2861-1 (file - denial of service)
2014-02-16 00:00:00
Fedora Update for file FEDORA-2014-2876
2014-03-12 00:00:00
Debian: Security Advisory (DSA-2861-1)
2014-02-15 00:00:00
debiancve
debiancve
CVE-2014-1943
2014-02-18 19:55:00
gentoo
gentoo
file: Denial of service
2014-03-13 00:00:00
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
cve
cve
CVE-2014-1943
2014-02-18 19:55:00
prion
prion
Double free
2014-02-18 19:55:00
mageia
mageia
Updated file package fixes security vulnerability
2014-02-22 23:10:59
Updated php packages fix security vulnerabilities
2014-04-04 21:33:24
Updated php packages fix security vulnerabilities
2014-04-04 16:08:18
securityvulns
securityvulns
[SECURITY] [DSA 2861-1] file security update
2014-02-18 00:00:00
file utility / libmagic / PHP DoS
2014-05-04 00:00:00
[ MDVSA-2014:059 ] php
2014-03-18 00:00:00
ubuntucve
ubuntucve
CVE-2014-1943
2014-02-18 00:00:00
freebsd
freebsd
file -- denial of service
2014-02-16 00:00:00
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
slackware
slackware
[slackware-security] php
2014-03-16 03:31:21
f5
f5
K15689 : Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
SOL15689 - Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
ubuntu
ubuntu
file vulnerabilities
2014-02-26 00:00:00
PHP vulnerabilities
2014-03-03 00:00:00
amazon
amazon
Medium: php54
2014-03-24 23:37:00
Important: php55
2014-03-24 23:37:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
oraclelinux
oraclelinux
file security and bug fix update
2014-10-15 00:00:00
php53 and php security update
2014-08-06 00:00:00
redhat
redhat
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1012) Moderate: php53 and php security update
2014-08-06 00:00:00
(RHSA-2014:1765) Important: php54-php security update
2014-10-30 00:00:00
centos
centos
file, python security update
2014-10-20 18:08:44
php, php53 security update
2014-08-06 14:53:37
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.058 Low
EPSS
Percentile
93.3%
Related for ALAS-2014-304