Lucene search
Gentoo FoundationMGASA-2014-0307HistoryAug 06, 2014 - 12:08 a.m.
Updated file packages fix security vulnerability
2014-08-0600:08:48
Gentoo Foundation
advisories.mageia.org
21
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.0%
file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule, due to an incomplete fix for CVE-2013-7345 (CVE-2014-3538). The Mageia 3 update also fixes a possible crash in softmagic.c due to an improperly rediffed patch for a memory leak in a previous update (mga#13701).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | file | < 5.12-8.6 | file-5.12-8.6.mga3 |
| Mageia | 4 | noarch | file | < 5.16-1.5 | file-5.16-1.5.mga4 |
Related
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:11:28
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:16
nessus
nessus
Mandriva Linux Security Advisory : file (MDVSA-2014:146)
2014-08-01 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2014:149)
2014-08-07 00:00:00
Fedora 20 : php-5.5.11-1.fc20 (2014-4767)
2014-04-16 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0307)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0324)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-332)
2015-09-08 00:00:00
prion
prion
Design/Logic Flaw
2014-07-03 14:55:00
Design/Logic Flaw
2014-03-24 16:31:00
Design/Logic Flaw
2014-04-08 23:55:00
debiancve
debiancve
CVE-2014-3538
2014-07-03 14:55:00
CVE-2013-7345
2014-03-24 16:31:00
ubuntucve
ubuntucve
CVE-2013-7345
2014-03-24 00:00:00
CVE-2014-3538
2014-07-03 00:00:00
cve
cve
mageia
mageia
Updated php packages fix security vulnerabilities
2014-08-08 15:23:49
Updated file packages fix security vulnerabilities
2014-03-31 23:34:34
Updated php packages fix security vulnerability
2014-04-18 00:20:35
amazon
amazon
f5
f5
K15303 : PHP vulnerability CVE-2013-7345
2014-06-05 00:00:00
SOL15303 - PHP vulnerability CVE-2013-7345
2014-06-05 00:00:00
gentoo
gentoo
file: Denial of service
2014-08-26 00:00:00
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
slackware
slackware
[slackware-security] php
2014-04-21 21:13:00
[slackware-security] php
2014-09-04 22:00:56
securityvulns
securityvulns
[slackware-security] php (SSA:2014-111-02)
2014-05-04 00:00:00
file utility / libmagic / PHP DoS
2014-05-04 00:00:00
file / PHP multiple security vulnerabilities
2014-07-14 00:00:00
debian
debian
[SECURITY] [DLA 67-1] php5 security update
2014-09-30 07:41:52
[SECURITY] [DSA 3008-1] php5 security update
2014-08-21 06:22:21
[SECURITY] [DSA 3008-2] php5 regression update
2014-08-21 12:39:59
osv
osv
php5 - security update
2014-09-30 00:00:00
php5 - security update
2014-08-21 00:00:00
file - security update
2014-09-10 00:00:00
ubuntu
ubuntu
file vulnerabilities
2014-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: php-5.5.11-1.fc20
2014-04-15 15:57:56
[SECURITY] Fedora 20 Update: file-5.14-20.fc20
2014-03-27 04:52:02
[SECURITY] Fedora 20 Update: file-5.19-1.fc20
2014-07-05 14:54:09
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
oraclelinux
oraclelinux
php security update
2014-09-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
php security update
2014-08-06 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
redhat
redhat
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
(RHSA-2014:1013) Moderate: php security update
2014-08-06 00:00:00
centos
centos
file, python security update
2016-05-16 10:13:44
php security update
2014-09-30 10:59:18
php security update
2014-08-06 14:38:20
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.0%
Related for MGASA-2014-0307