CVE-2014-3710

🗓️ 05 Nov 2014 11:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 34 Views

The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, allows remote attackers to cause denial of servic

Reporter	Title	Published	Views	Family All 173
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection	16 Jun 201821:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: File vulnerabilities affect IBM SmartClound Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in file affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)	16 Jun 201822:02	–	ibm
Tenable Nessus	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	PHP 5.4.x < 5.4.35 / 5.5.x < 5.5.19 / 5.6.x < 5.6.3 Out-of-Bounds Read	25 Feb 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php54 (ALAS-2014-450)	26 Nov 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php55 (ALAS-2014-451)	26 Nov 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : file (ALAS-2014-453)	26 Nov 201400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	file	1:5.20-2	file_1:5.20-2_any.deb
Debian	12	any	file	1:5.20-2	file_1:5.20-2_any.deb
Debian	13	any	file	1:5.20-2	file_1:5.20-2_any.deb
Debian	14	any	file	1:5.20-2	file_1:5.20-2_any.deb
Debian	999	any	file	1:5.20-2	file_1:5.20-2_any.deb

05 Nov 2014 11:00Current

8.2High risk

Vulners AI Score8.2

CVSS 25

EPSS0.14013