Lucene search
Ubuntu.comUB:CVE-2014-2270HistoryMar 14, 2014 - 12:00 a.m.
CVE-2014-2270
2014-03-1400:00:00
ubuntu.com
ubuntu.com
16
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.959 High
EPSS
Percentile
99.4%
softmagic.c in file before 5.17 and libmagic allows context-dependent
attackers to cause a denial of service (out-of-bounds memory access and
crash) via crafted offsets in the softmagic of a PE executable.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740960 (php)>
- <https://bugs.php.net/bug.php?id=66820>
- <http://bugs.gw.com/view.php?id=313>
Notes
| Author | Note |
|---|---|
| mdeslaur | see regression fix in DSA-2873-2 The regression in the debian package is caused by a fix for a different issue which does not seem to have a CVE number: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742262 (file regression 1) https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742265 (file regression 2) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | file | <Β 5.03-5ubuntu1.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | file | <Β 5.09-2ubuntu0.3 | UNKNOWN |
| ubuntu | 12.10 | noarch | file | <Β 5.11-2ubuntu0.2 | UNKNOWN |
| ubuntu | 13.10 | noarch | file | <Β 5.11-2ubuntu4.2 | UNKNOWN |
| ubuntu | 10.04 | noarch | php5 | <Β 5.3.2-1ubuntu4.24 | UNKNOWN |
| ubuntu | 12.04 | noarch | php5 | <Β 5.3.10-1ubuntu3.11 | UNKNOWN |
| ubuntu | 12.10 | noarch | php5 | <Β 5.4.6-1ubuntu1.8 | UNKNOWN |
| ubuntu | 13.10 | noarch | php5 | <Β 5.5.3+dfsg-1ubuntu2.3 | UNKNOWN |
Related
nessus
nessus
openSUSE Security Update : file (openSUSE-SU-2014:0435-1)
2014-06-13 00:00:00
Fedora 19 : file-5.11-13.fc19 (2014-3589)
2014-03-27 00:00:00
openvas
openvas
Ubuntu Update for file USN-2162-1
2014-04-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0123)
2022-01-28 00:00:00
Ubuntu Update for php5 USN-2163-1
2014-04-08 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Out-of-Bounds Access
2018-08-13 18:00:16
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:16
prion
prion
Out-of-bounds
2014-03-14 15:55:00
osv
osv
file - several
2014-03-11 00:00:00
php5 - security update
2014-06-01 00:00:00
php5 - security update
2015-01-31 00:00:00
ubuntu
ubuntu
file vulnerability
2014-04-07 00:00:00
PHP vulnerability
2014-04-07 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Libmagic Portable Executable Out-Of-Bounds Memory Access (CVE-2014-2270)
2014-05-18 00:00:00
cve
cve
CVE-2014-2270
2014-03-14 15:55:00
freebsd
freebsd
file -- out-of-bounds access in search rules with offsets from input file
2013-12-20 00:00:00
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
seebug
seebug
PHP Fileinfoη»δ»ΆθΆηε
εη ΄εζΌζ΄
2014-03-12 00:00:00
debian
debian
[SECURITY] [DSA 2873-1] file security update
2014-03-11 21:09:54
[SECURITY] [DSA 2873-1] file security update
2014-03-11 21:09:54
[SECURITY] [DSA 2943-1] php5 security update
2014-06-01 08:38:03
mageia
mageia
Updated file packages fix CVE-2014-2270
2014-03-07 18:18:43
Updated php packages fix security vulnerabilities
2014-04-04 21:33:24
Updated php packages fix security vulnerabilities
2014-04-04 16:08:18
debiancve
debiancve
CVE-2014-2270
2014-03-14 15:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2873-1] file security update
2014-03-13 00:00:00
file utility / libmagic / PHP DoS
2014-05-04 00:00:00
[ MDVSA-2014:059 ] php
2014-03-18 00:00:00
amazon
amazon
Medium: php54
2014-03-24 23:37:00
Important: php55
2014-03-24 23:37:00
fedora
fedora
[SECURITY] Fedora 19 Update: file-5.11-13.fc19
2014-03-27 04:47:52
[SECURITY] Fedora 20 Update: file-5.14-17.fc20
2014-03-12 12:31:06
[SECURITY] Fedora 20 Update: file-5.14-20.fc20
2014-03-27 04:52:02
f5
f5
K15689 : Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
SOL15689 - Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270
2014-10-09 00:00:00
gentoo
gentoo
file: Denial of service
2015-03-16 00:00:00
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
redhat
redhat
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1012) Moderate: php53 and php security update
2014-08-06 00:00:00
(RHSA-2014:1765) Important: php54-php security update
2014-10-30 00:00:00
oraclelinux
oraclelinux
file security and bug fix update
2014-10-15 00:00:00
php53 and php security update
2014-08-06 00:00:00
centos
centos
file, python security update
2014-10-20 18:08:44
php, php53 security update
2014-08-06 14:53:37
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.959 High
EPSS
Percentile
99.4%
Related for UB:CVE-2014-2270