Lucene search
K

147 matches found

securityvulns
securityvulns
added 2014/02/18 12:0 a.m.67 views

[SECURITY] [DSA 2861-1] file security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2861-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 16, 2014 http://www.debian.org/security/faq -...

5CVSS1.3AI score0.24895EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/02/17 12:0 a.m.34 views

Debian DSA-2861-1 : file - denial of service

It was discovered that file, a file type classification tool, contains a flaw in the handling of 'indirect' magic rules in the libmagic library, which leads to an infinite recursion when trying to determine the file type of certain files. The Common Vulnerabilities and Exposures project ID...

5CVSS7.7AI score0.24895EPSS
Exploits0References6
Debian
Debian
added 2014/02/16 2:9 p.m.29 views

[SECURITY] [DSA 2861-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2861-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 16, 2014 http://www.debian.org/security/faq -...

5CVSS1.4AI score0.24895EPSS
Exploits0
Debian
Debian
added 2014/02/16 2:9 p.m.37 views

[SECURITY] [DSA 2861-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2861-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 16, 2014 http://www.debian.org/security/faq -...

5CVSS6AI score0.24895EPSS
Exploits0
OpenVAS
OpenVAS
added 2014/02/16 12:0 a.m.35 views

Debian Security Advisory DSA 2861-1 (file - denial of service)

It was discovered that file, a file type classification tool, contains a flaw in the handling of indirect magic rules in the libmagic library, which leads to an infinite recursion when trying to determine the file type of certain files. The Common Vulnerabilities and Exposures project ID...

5CVSS0.24895EPSS
Exploits0References1
OSV
OSV
added 2014/02/16 12:0 a.m.31 views

DSA-2861-1 file - denial of service

Bulletin has no description...

5CVSS6.7AI score0.24895EPSS
Exploits0
OpenVAS
OpenVAS
added 2014/02/15 12:0 a.m.31 views

Debian: Security Advisory (DSA-2861-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.7AI score0.24895EPSS
Exploits0References3
Prion
Prion
added 2013/06/21 9:55 p.m.18 views

Design/Logic Flaw

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service invalid pointer dereference and application crash via an MP3 file that triggers incorrect MIME type detection during access to an finfo object...

4.3CVSS7.1AI score0.00326EPSS
Exploits0References2Affected Software1
Kitploit
Kitploit
added 2013/04/02 10:58 p.m.18 views

[Binwalk v1.2] Firmware Analysis Tool

Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the libmagic library, so it is compatible with magic signatures created for the Unix file...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2012/08/03 12:0 a.m.25 views

Mandriva Update for file MDVSA-2012:035 (file)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.5CVSS8.3AI score0.00326EPSS
Exploits1References2
OSV
OSV
added 2012/07/17 9:55 p.m.1 views

DEBIAN-CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

6.5CVSS6.8AI score0.00326EPSS
Exploits1References1
NVD
NVD
added 2012/07/17 9:55 p.m.21 views

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

6.5CVSS6.4AI score0.00326EPSS
Exploits1References6
CVE
CVE
added 2012/07/17 9:0 p.m.191 views

CVE-2012-1571

CVE-2012-1571 describes DoS via crafted CDF files that trigger out-of-bounds read or invalid pointer dereference in the File Information (fileinfo) component (libmagic) used by file and PHP. Public Advisories confirm the issue arises from an incomplete fix and that affected products include the f...

6.5CVSS8.8AI score0.00326EPSS
Exploits1References6Affected Software2
Debian CVE
Debian CVE
added 2012/07/17 9:0 p.m.38 views

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

6.5CVSS7.6AI score0.00326EPSS
Exploits1
Cvelist
Cvelist
added 2012/07/17 9:0 p.m.29 views

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

9.1AI score0.00326EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2012/07/17 12:0 a.m.2 views

PT-2012-1066

Name of the Vulnerable Software and Affected Versions file versions prior to 5.11 libmagic versions prior to 5.11 Description The issue is related to multiple vulnerabilities in the file package, which can lead to a denial of service crash when a crafted Composite Document File CDF is processed...

7.5CVSS8.6AI score0.48662EPSS
Exploits7References74
OpenVAS
OpenVAS
added 2012/03/12 12:0 a.m.24 views

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.5CVSS7.9AI score0.00326EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2012/03/12 12:0 a.m.33 views

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. OpenVAS Vulnerability Test $Id: deb24221.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2422-1 file Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

4.3CVSS0.2AI score0.00326EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2012/03/01 12:0 a.m.35 views

Debian DSA-2422-2 : file - missing bounds checks

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File CDF format, leading to crashes. Note that after this update, file may return different detection results for CDF files well-formed or not. The new...

6.5CVSS8.1AI score0.00326EPSS
Exploits1References3
OSV
OSV
added 2012/02/29 12:0 a.m.20 views

DSA-2422-1 file - missing bounds check

Bulletin has no description...

6.5CVSS6.3AI score0.00326EPSS
Exploits1
Rows per page
Query Builder