CVE-2014-2270

🗓️ 14 Mar 2014 00:00:00Reported by ubuntu.comType

softmagic.c in file before 5.17 and libmagic allows attackers to cause a denial of service via crafted offsets in the softmagic of a PE executable

Reporter	Title	Published	Views	Family All 132
Tenable Nessus	Fedora 19 : file-5.11-13.fc19 (2014-3589)	27 Mar 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : file (openSUSE-SU-2014:0435-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : php5 vulnerability (USN-2163-1)	8 Apr 201400:00	–	nessus
Tenable Nessus	SuSE 11.3 Security Update : file (SAT Patch Number 9066)	19 May 201400:00	–	nessus
Tenable Nessus	FreeBSD : file -- out-of-bounds access in search rules with offsets from input file (7e61a839-b714-11e3-8195-001966155bea)	31 Mar 201400:00	–	nessus
Tenable Nessus	Fedora 20 : file-5.14-17.fc20 (2014-3606)	13 Mar 201400:00	–	nessus
Tenable Nessus	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : file vulnerability (USN-2162-1)	8 Apr 201400:00	–	nessus
Tenable Nessus	Debian DSA-2873-1 : file - several vulnerabilities	12 Mar 201400:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : file (MDVSA-2014:051)	14 Mar 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php54 (ALAS-2014-313)	28 Mar 201400:00	–	nessus

Source	Link
seclists	www.seclists.org/oss-sec/2014/q1/473
ubuntu	www.ubuntu.com/security/notices/USN-2162-1
ubuntu	www.ubuntu.com/security/notices/USN-2163-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-2270
launchpad	www.launchpad.net/bugs/cve/CVE-2014-2270
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-2270

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	10.04	noarch	file	5.03-5ubuntu1.2	UNKNOWN
ubuntu	12.04	noarch	file	5.09-2ubuntu0.3	UNKNOWN
ubuntu	12.10	noarch	file	5.11-2ubuntu0.2	UNKNOWN
ubuntu	13.10	noarch	file	5.11-2ubuntu4.2	UNKNOWN
ubuntu	10.04	noarch	php5	5.3.2-1ubuntu4.24	UNKNOWN
ubuntu	12.04	noarch	php5	5.3.10-1ubuntu3.11	UNKNOWN
ubuntu	12.10	noarch	php5	5.4.6-1ubuntu1.8	UNKNOWN
ubuntu	13.10	noarch	php5	5.5.3+dfsg-1ubuntu2.3	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Mar 2014 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS24.3

EPSS0.959

softmagic denial of service libmagic pe executable crafted offsets out-of-bounds memory access crash unix file bugs cve-2014-2270 security document