CVE-2014-9620

Several security issues were fixed in file ...

Multiple security issues have been found in file, a tool/library to determine a file type Processing a malformed file could result in denial of service Most of the changes are related to parsing ELF files As part of the fixes, several limits on aspects of the detection were added or tightened, sometimes resulting in messages like recursion limit ...

The ELF parser in file 508 through 521 allows remote attackers to cause a denial of service via a large number of notes (CVE-2014-9620) The ELF parser (readelfc) in file before 521 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities ...

A flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file ...