CVE-2014-8116

2014-12-1700:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

The ELF parser (readelf.c) in file before 5.21 allows remote attackers to
cause a denial of service (CPU consumption or crash) via a large number of
(1) program or (2) section headers or (3) invalid capabilities.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773148>

Notes

Author	Note
mdeslaur	readelf.c isn’t used in php

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfile< 5.03-5ubuntu1.5UNKNOWN
ubuntu12.04noarchfile< 5.09-2ubuntu0.6UNKNOWN
ubuntu14.04noarchfile< 1:5.14-2ubuntu3.3UNKNOWN
ubuntu14.10noarchfile< 1:5.19-1ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	file	< 5.03-5ubuntu1.5	UNKNOWN
ubuntu	12.04	noarch	file	< 5.09-2ubuntu0.6	UNKNOWN
ubuntu	14.04	noarch	file	< 1:5.14-2ubuntu3.3	UNKNOWN
ubuntu	14.10	noarch	file	< 1:5.19-1ubuntu1.2	UNKNOWN