Published: 18/02/2019 Updated: 24/08/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote malicious users to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

Vulnerable Product	Search on Vulmon	Subscribe to Product
file project file 5.35
debian debian linux 8.0
opensuse leap 15.0
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10

Several security issues were fixed in file ...

Debian Bug report logs - #922968 file: CVE-2019-8905 CVE-2019-8907 Package: src:file; Maintainer for src:file is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 22 Feb 2019 13:09:02 UTC Severity: important Tags: security, upstream Found in version fi ...

Debian Bug report logs - #922967 file: CVE-2019-8904 Package: src:file; Maintainer for src:file is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 22 Feb 2019 12:51:01 UTC Severity: important Tags: security, upstream Found in version file/1:535-2 Fi ...

Debian Bug report logs - #922969 file: CVE-2019-8906 Package: src:file; Maintainer for src:file is Christoph Biedl <debianaxhn@manchmalin-ulmde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 22 Feb 2019 13:12:02 UTC Severity: important Tags: security, upstream Found in version file/1:535-2 Fi ...

do_bid_note in readelfc in libmagica has a stack-based buffer over-read, related to file_printf and file_vprintf (CVE-2019-8904) do_core_note in readelfc in libmagica has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360 (CVE-2019-8905) do_core_note in readelfc in libmagica allows rem ...

do_core_note in readelfc in libmagica in file 535 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact ...

CWE-787 https://bugs.astron.com/view.php?id=65 https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html https://usn.ubuntu.com/3911-1/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html https://usn.ubuntu.com/3911-1/https://nvd.nist.gov

CVE-2019-8907

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect