1. CVE-Search
  2. CVE-2014-9620
ID CVE-2014-9620
Summary The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
References
Vulnerable Configurations
  • cpe:2.3:a:file_project:file:5.08:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.08:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.09:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.09:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.10:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.12:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.13:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.13:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.14:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.14:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.15:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.15:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.16:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.16:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.17:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.17:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.18:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.18:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.19:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.19:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.20:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.20:*:*:*:*:*:*:*
  • cpe:2.3:a:file_project:file:5.21:*:*:*:*:*:*:*
    cpe:2.3:a:file_project:file:5.21:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 16-06-2018 - 01:29)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
rhsa
id RHSA-2016:0760
rpms
  • file-0:5.04-30.el6
  • file-debuginfo-0:5.04-30.el6
  • file-devel-0:5.04-30.el6
  • file-libs-0:5.04-30.el6
  • file-static-0:5.04-30.el6
  • python-magic-0:5.04-30.el6
refmap via4
bid 71715
confirm
debian DSA-3121
gentoo GLSA-201503-08
mlist
  • [File] 20141216 file 5.21 is now available
  • [File] 20150102 file 5.22 is now available
  • [oss-security] 20150117 Re: CVE request: file(1) DoS
ubuntu USN-3686-1
Last major update 16-06-2018 - 01:29
Published 21-01-2015 - 18:59
Last modified 16-06-2018 - 01:29
Back to Top