[SECURITY] [DLA 204-1] file security update

2015-04-1913:06:12

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.06 Low

EPSS

Percentile

93.4%

JSON

Package : file
Version : 5.04-5+squeeze10
CVE ID : CVE-2014-9653
Debian Bug : 777585

This update fixes the following issue in the file package:

CVE-2014-9653

readelf.c does not consider that pread calls sometimes read only
a subset of the available data, which allows remote attackers to
cause a denial of service (uninitialized memory access) or
possibly have unspecified other impact via a crafted ELF file.

Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7armellibmagic-dev< 5.11-2+deb7u8libmagic-dev_5.11-2+deb7u8_armel.deb
Debian7mipselfile< 5.11-2+deb7u8file_5.11-2+deb7u8_mipsel.deb
Debian7ia64file< 5.11-2+deb7u8file_5.11-2+deb7u8_ia64.deb
Debian7powerpcpython-magic-dbg< 5.11-2+deb7u8python-magic-dbg_5.11-2+deb7u8_powerpc.deb
Debian7armelpython-magic-dbg< 5.11-2+deb7u8python-magic-dbg_5.11-2+deb7u8_armel.deb
Debian7armelpython-magic< 5.11-2+deb7u8python-magic_5.11-2+deb7u8_armel.deb
Debian7kfreebsd-amd64python-magic< 5.11-2+deb7u8python-magic_5.11-2+deb7u8_kfreebsd-amd64.deb
Debian7ia64python-magic-dbg< 5.11-2+deb7u8python-magic-dbg_5.11-2+deb7u8_ia64.deb
Debian7s390python-magic-dbg< 5.11-2+deb7u8python-magic-dbg_5.11-2+deb7u8_s390.deb
Debian7mipselpython-magic< 5.11-2+deb7u8python-magic_5.11-2+deb7u8_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armel	libmagic-dev	< 5.11-2+deb7u8	libmagic-dev_5.11-2+deb7u8_armel.deb
Debian	7	mipsel	file	< 5.11-2+deb7u8	file_5.11-2+deb7u8_mipsel.deb
Debian	7	ia64	file	< 5.11-2+deb7u8	file_5.11-2+deb7u8_ia64.deb
Debian	7	powerpc	python-magic-dbg	< 5.11-2+deb7u8	python-magic-dbg_5.11-2+deb7u8_powerpc.deb
Debian	7	armel	python-magic-dbg	< 5.11-2+deb7u8	python-magic-dbg_5.11-2+deb7u8_armel.deb
Debian	7	armel	python-magic	< 5.11-2+deb7u8	python-magic_5.11-2+deb7u8_armel.deb
Debian	7	kfreebsd-amd64	python-magic	< 5.11-2+deb7u8	python-magic_5.11-2+deb7u8_kfreebsd-amd64.deb
Debian	7	ia64	python-magic-dbg	< 5.11-2+deb7u8	python-magic-dbg_5.11-2+deb7u8_ia64.deb
Debian	7	s390	python-magic-dbg	< 5.11-2+deb7u8	python-magic-dbg_5.11-2+deb7u8_s390.deb
Debian	7	mipsel	python-magic	< 5.11-2+deb7u8	python-magic_5.11-2+deb7u8_mipsel.deb