Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2019-0118
HistoryMar 29, 2019 - 6:51 p.m.

Updated file packages fix security vulnerabilities

2019-03-2918:51:06
Gentoo Foundation
advisories.mageia.org
7

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.8%

JSON

The updated file packages fix security vulnerabilities: do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360. (CVE-2019-8905) do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. (CVE-2019-8907)

OSVersionArchitecturePackageVersionFilename
Mageia6noarchfile< 5.25-5.2file-5.25-5.2.mga6

Related

openvas 23
suse 3
nessus 40
fedora 5
prion 3
ubuntucve 3
osv 4
debian 1
redhatcve 3
archlinux 1
amazon 2
cve 3
debiancve 3
alpinelinux 2
cloudfoundry 3
ubuntu 3
f5 1
redhat 4
oraclelinux 1
gentoo 1
veracode 1
mageia 1
slackware 2
centos 1
photon 10
ibm 1
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0118)
2022-01-28 00:00:00
openSUSE: Security Advisory for file (openSUSE-SU-2019:0345-1)
2019-03-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0571-1)
2021-06-09 00:00:00
suse
suse
Security update for file (moderate)
2019-03-18 00:00:00
Security update for file (moderate)
2019-04-12 00:00:00
Security update for php5 (moderate)
2018-09-12 12:08:47
nessus
nessus
SUSE SLED15 / SLES15 Security Update : file (SUSE-SU-2019:0571-1)
2019-03-08 00:00:00
SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2019:0839-1)
2019-04-03 00:00:00
openSUSE Security Update : file (openSUSE-2019-345)
2019-03-19 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: file-5.33-10.fc28
2019-03-12 21:44:56
[SECURITY] Fedora 29 Update: file-5.34-12.fc29
2019-03-01 02:41:25
[SECURITY] Fedora 28 Update: file-5.33-6.fc28
2018-06-16 20:20:29
prion
prion
Stack overflow
2019-02-18 17:29:00
Design/Logic Flaw
2019-02-18 17:29:00
Out-of-bounds
2018-06-11 10:29:00
ubuntucve
ubuntucve
CVE-2019-8905
2019-02-18 00:00:00
CVE-2019-8907
2019-02-18 00:00:00
CVE-2018-10360
2018-06-11 00:00:00
osv
osv
file - security update
2019-02-28 00:00:00
CVE-2019-8905
2019-02-18 17:29:00
CVE-2019-8907
2019-02-18 17:29:01
debian
debian
[SECURITY] [DLA 1698-1] file security update
2019-02-28 21:56:24
redhatcve
redhatcve
CVE-2019-8905
2020-03-04 19:33:44
CVE-2019-8907
2020-04-08 20:59:42
CVE-2018-10360
2018-06-15 20:48:40
archlinux
archlinux
[ASA-201903-5] file: multiple issues
2019-03-03 00:00:00
amazon
amazon
Medium: file
2019-03-21 22:08:00
Low: file
2020-07-14 02:34:00
cve
cve
CVE-2019-8905
2019-02-18 17:29:00
CVE-2019-8907
2019-02-18 17:29:00
CVE-2018-10360
2018-06-11 10:29:00
debiancve
debiancve
CVE-2019-8905
2019-02-18 17:29:00
CVE-2019-8907
2019-02-18 17:29:00
CVE-2018-10360
2018-06-11 10:29:00
alpinelinux
alpinelinux
CVE-2019-8905
2019-02-18 17:29:00
CVE-2019-8907
2019-02-18 17:29:00
cloudfoundry
cloudfoundry
USN-3911-1: file vulnerabilities | Cloud Foundry
2019-03-26 00:00:00
USN-3911-2: file regression | Cloud Foundry
2020-06-24 00:00:00
USN-3686-1: file vulnerabilities | Cloud Foundry
2018-06-20 00:00:00
ubuntu
ubuntu
file vulnerabilities
2019-03-18 00:00:00
file vulnerabilities
2018-06-28 00:00:00
file vulnerabilities
2018-06-14 00:00:00
f5
f5
K50899356 : file vulnerability CVE-2018-10360
2022-05-05 00:00:00
redhat
redhat
(RHSA-2020:1022) Low: file security update
2020-03-31 09:09:44
(RHSA-2020:2768) Low: file security update
2020-06-30 11:41:08
(RHSA-2020:2521) Low: file security update
2020-06-10 21:33:07
oraclelinux
oraclelinux
file security update
2020-04-06 00:00:00
gentoo
gentoo
file: Denial of service
2018-06-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-06-12 06:31:15
mageia
mageia
Updated file packages fix a security vulnerability
2018-06-25 01:02:29
slackware
slackware
[slackware-security] file
2018-07-31 07:34:02
[slackware-security] file
2019-02-23 21:37:08
centos
centos
file, python security update
2020-04-08 18:00:55
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0228
2020-04-10 00:00:00
Critical Photon OS Security Update - PHSA-2020-0080
2020-04-14 00:00:00
Important Photon OS Security Update - PHSA-2020-0228
2020-04-10 00:00:00
ibm
ibm
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-08-13 22:15:02

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.8%

JSON
Related for MGASA-2019-0118
openvas23suse3nessus40fedora5prion3ubuntucve3osv4debian1redhatcve3archlinux1amazon2cve3debiancve3alpinelinux2cloudfoundry3ubuntu3f51redhat4oraclelinux1gentoo1veracode1mageia1slackware2centos1photon10ibm1