Lucene search
Gentoo FoundationMGASA-2014-0354HistoryAug 27, 2014 - 3:04 a.m.
Updated file packages fix CVE-2014-3587
2014-08-2703:04:56
Gentoo Foundation
advisories.mageia.org
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.2%
Updated file packages fix security vulnerability: A flaw was found in the way file uses cdf_read_property_info function when checks stream offsets for certain Composite Document Format (CDF). An insufficient input validation flaw for p and q minimal and maximal value, leads to a pointer overflow. This issue only affects 32bit systems (CVE-2014-3587).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | file | < 5.12-8.7 | file-5.12-8.7.mga3 |
| Mageia | 4 | noarch | file | < 5.16-1.6 | file-5.16-1.6.mga4 |
Related
nessus
nessus
Ubuntu 14.04 LTS : file vulnerability (USN-2369-1)
2014-10-03 00:00:00
Mandriva Linux Security Advisory : file (MDVSA-2014:167)
2014-09-12 00:00:00
Debian DLA-50-1 : file security update
2015-03-26 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2369-1)
2014-10-03 00:00:00
Mageia: Security Advisory (MGASA-2014-0354)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-50-1)
2023-03-08 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Fileinfo cdf_read_property_info Denial of Service (CVE-2014-3587)
2014-10-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:19
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:16
securityvulns
securityvulns
[ MDVSA-2014:167 ] file
2014-09-03 00:00:00
[USN-2344-1] PHP vulnerabilities
2014-09-15 00:00:00
file utility memory corruption
2014-09-03 00:00:00
ubuntu
ubuntu
file vulnerability
2014-10-03 00:00:00
PHP vulnerabilities
2014-09-10 00:00:00
ubuntucve
ubuntucve
CVE-2014-3587
2014-08-22 00:00:00
kitploit
kitploit
Versionscan - A PHP Version Scanner For Reporting Possible Vulnerabilities
2019-05-21 21:17:00
osv
osv
file - security update
2014-09-10 00:00:00
php5 - security update
2014-09-30 00:00:00
php5 - security update
2014-08-21 00:00:00
debian
debian
[SECURITY] [DLA 50-1] file security update
2014-09-10 15:52:03
[SECURITY] [DLA 67-1] php5 security update
2014-09-30 07:41:52
[SECURITY] [DSA 3008-1] php5 security update
2014-08-21 06:22:21
cve
cve
CVE-2014-3587
2014-08-23 01:55:00
prion
prion
Integer overflow
2014-08-23 01:55:00
debiancve
debiancve
CVE-2014-3587
2014-08-23 01:55:00
amazon
amazon
Medium: file
2014-09-03 14:38:00
Medium: php55
2014-09-18 21:03:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.19-7.fc20
2014-10-29 11:03:54
[SECURITY] Fedora 20 Update: file-5.19-4.fc20
2014-08-24 02:55:59
[SECURITY] Fedora 20 Update: php-5.5.16-1.fc20
2014-09-02 06:40:37
mageia
mageia
Updated php packages fix multiple security vulnerabilities
2014-09-05 13:07:37
redhat
redhat
(RHSA-2014:1326) Moderate: php53 and php security update
2014-09-30 00:00:00
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
centos
centos
php, php53 security update
2014-09-30 10:27:47
file, python security update
2016-05-16 10:13:44
php security update
2014-09-30 10:59:18
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
oraclelinux
oraclelinux
php53 and php security update
2014-09-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
php security update
2014-09-30 00:00:00
slackware
slackware
[slackware-security] php
2014-09-04 22:00:56
suse
suse
Security update for php53 (important)
2016-09-16 21:09:09
Security update for php5 (important)
2016-09-28 15:09:48
Security update for php5 (important)
2016-10-04 17:11:09
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.2%
Related for MGASA-2014-0354