CVE-2019-8907 - do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of se

CVE-2019-8907

Summary

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

References

Vulnerable Configurations

cpe:2.3:a:file_project:file:5.35:*:*:*:*:*:*:*
cpe:2.3:a:file_project:file:5.35:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

misc	https://bugs.astron.com/view.php?id=65
mlist	[debian-lts-announce] 20190228 [SECURITY] [DLA 1698-1] file security update
suse	openSUSE-SU-2019:0345 openSUSE-SU-2019:1197
ubuntu	USN-3911-1

Last major update

24-08-2020 - 17:37

Published

18-02-2019 - 17:29

Last modified

24-08-2020 - 17:37