Lucene search
Gentoo FoundationGLSA-201403-03HistoryMar 13, 2014 - 12:00 a.m.
file: Denial of service
2014-03-1300:00:00
Gentoo Foundation
security.gentoo.org
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.058 Low
EPSS
Percentile
93.3%
Background
file is a utility that guesses a file format by scanning binary data for patterns.
Description
A flaw was found in the way the file utility determines the type of a file.
Impact
A remote attacker could entice a user to open a specially crafted file, possibly resulting in a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All file users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-apps/file-5.17"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | sys-apps/file | < 5.17 | UNKNOWN |
Related
checkpoint_advisories
checkpoint_advisories
PHP Fileinfo Call Stack Exhaustion Denial of Service (CVE-2014-1943)
2014-05-18 00:00:00
nessus
nessus
Fedora 19 : file-5.11-12.fc19 (2014-2876)
2014-03-04 00:00:00
Fedora 20 : file-5.14-15.fc20 (2014-2739)
2014-02-24 00:00:00
FreeBSD : file -- denial of service (815dbcf9-a2d6-11e3-8088-002590860428)
2014-03-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
debian
debian
[SECURITY] [DSA 2861-1] file security update
2014-02-16 14:09:45
[SECURITY] [DSA 2868-1] php5 security update
2014-03-02 19:18:49
[SECURITY] [DSA 2868-1] php5 security update
2014-03-02 19:18:49
osv
osv
file - denial of service
2014-02-16 00:00:00
php5 - denial of service
2014-03-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.14-15.fc20
2014-02-23 08:38:00
[SECURITY] Fedora 19 Update: file-5.11-12.fc19
2014-03-04 06:44:00
[SECURITY] Fedora 20 Update: file-5.14-17.fc20
2014-03-12 12:31:06
openvas
openvas
Debian Security Advisory DSA 2861-1 (file - denial of service)
2014-02-16 00:00:00
Fedora Update for file FEDORA-2014-2876
2014-03-12 00:00:00
Debian: Security Advisory (DSA-2861-1)
2014-02-15 00:00:00
debiancve
debiancve
CVE-2014-1943
2014-02-18 19:55:00
cve
cve
CVE-2014-1943
2014-02-18 19:55:00
prion
prion
Double free
2014-02-18 19:55:00
mageia
mageia
Updated file package fixes security vulnerability
2014-02-22 23:10:59
Updated php packages fix security vulnerabilities
2014-04-04 21:33:24
Updated php packages fix security vulnerabilities
2014-04-04 16:08:18
securityvulns
securityvulns
[SECURITY] [DSA 2861-1] file security update
2014-02-18 00:00:00
file utility / libmagic / PHP DoS
2014-05-04 00:00:00
[ MDVSA-2014:059 ] php
2014-03-18 00:00:00
ubuntucve
ubuntucve
CVE-2014-1943
2014-02-18 00:00:00
slackware
slackware
[slackware-security] php
2014-03-16 03:31:21
freebsd
freebsd
file -- denial of service
2014-02-16 00:00:00
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
amazon
amazon
f5
f5
K15689 : Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
SOL15689 - Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
ubuntu
ubuntu
file vulnerabilities
2014-02-26 00:00:00
PHP vulnerabilities
2014-03-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
redhat
redhat
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1012) Moderate: php53 and php security update
2014-08-06 00:00:00
(RHSA-2014:1765) Important: php54-php security update
2014-10-30 00:00:00
oraclelinux
oraclelinux
file security and bug fix update
2014-10-15 00:00:00
php53 and php security update
2014-08-06 00:00:00
centos
centos
file, python security update
2014-10-20 18:08:44
php, php53 security update
2014-08-06 14:53:37
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.058 Low
EPSS
Percentile
93.3%
Related for GLSA-201403-03