Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8117
HistoryDec 17, 2014 - 7:59 p.m.

CVE-2014-8117

2014-12-1719:59:05
CWE-399
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.032 Low

EPSS

Percentile

91.3%

JSON

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.

Affected configurations

NVD
Node
file_projectfileRange≤5.20
OR
freebsdfreebsd
Node
mageiamageiaMatch4.0
Node
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10

Related

openvas 18
gentoo 1
nessus 28
cve 1
debiancve 1
prion 1
veracode 1
ubuntucve 1
cvelist 1
f5 2
osv 4
debian 3
mageia 2
freebsd_advisory 1
securityvulns 4
ubuntu 2
freebsd 1
fedora 1
amazon 1
centos 2
redhat 2
ibm 5
oraclelinux 2
openvas
openvas
Gentoo Security Advisory GLSA 201412-48
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2014-0537)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1730-1)
2021-04-19 00:00:00
gentoo
gentoo
file: Denial of service
2014-12-27 00:00:00
nessus
nessus
GLSA-201412-48 : file: Denial of Service
2014-12-29 00:00:00
F5 Networks BIG-IP : Linux file utility vulnerabilities (K16347)
2017-02-28 00:00:00
openSUSE Security Update : file (openSUSE-SU-2014:1720-1)
2014-12-29 00:00:00
cve
cve
CVE-2014-8117
2014-12-17 19:59:05
debiancve
debiancve
CVE-2014-8117
2014-12-17 19:59:05
prion
prion
Design/Logic Flaw
2014-12-17 19:59:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:29:34
ubuntucve
ubuntucve
CVE-2014-8117
2014-12-17 00:00:00
cvelist
cvelist
CVE-2014-8117
2014-12-17 19:00:00
f5
f5
SOL16347 - Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117
2015-04-09 00:00:00
K16347 : Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117
2015-07-22 00:00:00
osv
osv
file - security update
2015-01-09 00:00:00
file - security update
2015-01-08 00:00:00
php5 - security update
2015-01-31 00:00:00
debian
debian
[SECURITY] [DLA 131-1] file security update
2015-01-09 07:25:54
[SECURITY] [DSA 3121-1] file security update
2015-01-08 18:46:52
[SECURITY] [DLA 145-1] php5 security update
2015-01-31 13:08:25
mageia
mageia
Updated file packages fix security vulnerabilities
2014-12-19 18:06:35
Updated php packages fix security vulnerabilities
2015-01-28 00:08:29
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
securityvulns
securityvulns
libmagic / file / fileinfo / PHP security vulnerabilities
2015-03-18 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:28.file
2014-12-10 00:00:00
[USN-2535-1] PHP vulnerabilities
2015-03-18 00:00:00
ubuntu
ubuntu
file vulnerabilities
2015-02-04 00:00:00
PHP vulnerabilities
2015-03-18 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: file-5.22-2.fc21
2015-02-18 05:55:37
amazon
amazon
Medium: file
2015-03-23 08:32:00
centos
centos
file, python security update
2016-05-16 10:13:44
file, python security update
2015-11-30 19:28:42
redhat
redhat
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
(RHSA-2015:2155) Moderate: file security and bug fix update
2015-11-19 14:41:30
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
oraclelinux
oraclelinux
file security, bug fix, and enhancement update
2016-05-12 00:00:00
file security and bug fix update
2015-11-23 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.032 Low

EPSS

Percentile

91.3%

JSON
Related for NVD:CVE-2014-8117
openvas18gentoo1nessus28cve1debiancve1prion1veracode1ubuntucve1cvelist1f52osv4debian3mageia2freebsd_advisory1securityvulns4ubuntu2freebsd1fedora1amazon1centos2redhat2ibm5oraclelinux2