K15689 : Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270

Security Advisory Description

• CVE-2014-1943

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

• CVE-2014-2270

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Impact

None. No F5 products are vulnerable to this vulnerability.