K16347: Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117

🗓️ 21 Feb 2023 18:47:14Reported by f5Type

f5🔗 my.f5.com👁 59 Views

Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117. Denial of service via ELF parser and softmagic.c recursio

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection	16 Jun 201821:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: File vulnerabilities affect IBM SmartClound Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in file affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)	16 Jun 201822:02	–	ibm
FreeBSD	file -- multiple vulnerabilities	16 Dec 201400:00	–	freebsd
Amazon	Medium: file	23 Mar 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : file (ALAS-2015-497)	25 Mar 201500:00	–	nessus
Tenable Nessus	CentOS 7 : file (CESA-2015:2155)	2 Dec 201500:00	–	nessus
Tenable Nessus	CentOS 6 : file (CESA-2016:0760)	17 May 201600:00	–	nessus

Vulners

Node

f5 big-ip_ltmRange12.0.0–12.1.5

OR

f5 big-ip_ltmRange11.0.0–11.6.5

OR

f5 big-ip_ltmRange10.0.0–10.2.4

OR

f5 big-ip_aamRange12.0.0–12.1.5

OR

f5 big-ip_aamRange11.4.0–11.6.5

OR

f5 big-ip_afmRange12.0.0–12.1.5

OR

f5 big-ip_afmRange11.3.0–11.6.5

OR

f5 big-ip_analyticsRange12.0.0–12.1.5

OR

f5 big-ip_analyticsRange11.0.0–11.6.5

OR

f5 big-ip_apmRange12.0.0–12.1.5

OR

f5 big-ip_apmRange11.0.0–11.6.5

OR

f5 big-ip_apmRange10.1.0–10.2.4

OR

f5 big-ip_asmRange12.0.0–12.1.5

OR

f5 big-ip_asmRange11.0.0–11.6.5

OR

f5 big-ip_asmRange10.0.0–10.2.4

OR

f5 big-ip_dnsRange12.0.0–12.1.5

OR

f5 big-ip_edge_gatewayRange11.0.0–11.3.0

OR

f5 big-ip_edge_gatewayRange10.1.0–10.2.4

OR

f5 big-ip_gtmRange11.0.0–11.6.5

OR

f5 big-ip_gtmRange10.0.0–10.2.4

OR

f5 big-ip_link_controllerRange12.0.0–12.1.5

OR

f5 big-ip_link_controllerRange11.0.0–11.6.5

OR

f5 big-ip_link_controllerRange10.0.0–10.2.4

OR

f5 big-ip_pemRange12.0.0–12.1.5

OR

f5 big-ip_pemRange11.3.0–11.6.5

OR

f5 big-ip_psmRange11.0.0–11.4.1

OR

f5 big-ip_psmRange10.0.0–10.2.4

OR

f5 big-ip_webacceleratorRange11.0.0–11.3.0

OR

f5 big-ip_webacceleratorRange10.0.0–10.2.4

OR

f5 big-ip_womRange11.0.0–11.3.0

OR

f5 big-ip_womRange10.0.0–10.2.4

OR

f5 arxRange6.0.0–6.4.0

OR

f5 enterprise_managerRange3.0.0–3.1.1

OR

f5 enterprise_managerRange2.1.0–2.3.0

OR

f5 big-iq_centralized_managementRange6.0.0–6.0.1

OR

f5 big-iq_centralized_managementRange5.0.0–5.4.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

OR

f5 linerateRange2.4.0–2.5.0

21 Feb 2023 18:47Current

8.3High risk

Vulners AI Score8.3

CVSS 25

EPSS0.16453

linux file utility vulnerabilities cve-2014-8116 cve-2014-8117 denial of service elf parser softmagic.c recursion