Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-8117
HistoryDec 17, 2014 - 7:59 p.m.

CVE-2014-8117

2014-12-1719:59:00
CWE-399
[email protected]
web.nvd.nist.gov
63
cve-2014-8117
file before 5.21
denial of service
cpu consumption
crash
recursion limit

8.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.

Related

debiancve 1
nessus 27
gentoo 1
openvas 18
veracode 1
prion 1
ubuntucve 1
f5 2
mageia 2
debian 3
osv 4
ubuntu 2
securityvulns 4
freebsd_advisory 1
freebsd 1
fedora 1
amazon 1
ibm 5
redhat 2
centos 2
oraclelinux 2
debiancve
debiancve
CVE-2014-8117
2014-12-17 19:59:00
nessus
nessus
GLSA-201412-48 : file: Denial of Service
2014-12-29 00:00:00
F5 Networks BIG-IP : Linux file utility vulnerabilities (K16347)
2017-02-28 00:00:00
Debian DLA-131-1 : file security update
2015-03-26 00:00:00
gentoo
gentoo
file: Denial of service
2014-12-27 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-48
2015-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1730-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2014-0537)
2022-01-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:29:34
prion
prion
Design/Logic Flaw
2014-12-17 19:59:00
ubuntucve
ubuntucve
CVE-2014-8117
2014-12-17 00:00:00
f5
f5
K16347 : Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117
2015-07-22 00:00:00
SOL16347 - Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117
2015-04-09 00:00:00
mageia
mageia
Updated file packages fix security vulnerabilities
2014-12-19 18:06:35
Updated php packages fix security vulnerabilities
2015-01-28 00:08:29
debian
debian
[SECURITY] [DLA 131-1] file security update
2015-01-09 07:25:54
[SECURITY] [DSA 3121-1] file security update
2015-01-08 18:46:52
[SECURITY] [DLA 145-1] php5 security update
2015-01-31 13:08:25
osv
osv
file - security update
2015-01-09 00:00:00
file - security update
2015-01-08 00:00:00
php5 - security update
2015-01-31 00:00:00
ubuntu
ubuntu
file vulnerabilities
2015-02-04 00:00:00
PHP vulnerabilities
2015-03-18 00:00:00
securityvulns
securityvulns
libmagic / file / fileinfo / PHP security vulnerabilities
2015-03-18 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:28.file
2014-12-10 00:00:00
[USN-2535-1] PHP vulnerabilities
2015-03-18 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: file-5.22-2.fc21
2015-02-18 05:55:37
amazon
amazon
Medium: file
2015-03-23 08:32:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
redhat
redhat
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
(RHSA-2015:2155) Moderate: file security and bug fix update
2015-11-19 14:41:30
centos
centos
file, python security update
2016-05-16 10:13:44
file, python security update
2015-11-30 19:28:42
oraclelinux
oraclelinux
file security, bug fix, and enhancement update
2016-05-12 00:00:00
file security and bug fix update
2015-11-23 00:00:00

8.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON
Related for CVE-2014-8117
debiancve1nessus27gentoo1openvas18veracode1prion1ubuntucve1f52mageia2debian3osv4ubuntu2securityvulns4freebsd_advisory1freebsd1fedora1amazon1ibm5redhat2centos2oraclelinux2