CVE-2014-9620 The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
MediumCVSS 5.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/file(Debian:12) | < 1:5.21+15-1 | 1:5.21+15-1 |
| debian/file(Debian:13) | < 1:5.21+15-1 | 1:5.21+15-1 |
| debian/file(Debian:14) | < 1:5.21+15-1 | 1:5.21+15-1 |
| file project file | = 5.08 | No fix listed |
| file project file | = 5.09 | No fix listed |
| file project file | = 5.10 | No fix listed |
| file project file | = 5.11 | No fix listed |
| file project file | = 5.12 | No fix listed |
| file project file | = 5.13 | No fix listed |
| file project file | = 5.14 | No fix listed |
| file project file | = 5.15 | No fix listed |
| file project file | = 5.16 | No fix listed |
| file project file | = 5.17 | No fix listed |
| file project file | = 5.18 | No fix listed |
| file project file | = 5.19 | No fix listed |
| file project file | = 5.20 | No fix listed |
| file project file | = 5.21 | No fix listed |
References
- Debian Security Tracker CVE-2014-9620 vendor-advisory
- advisories.mageia.org
- [File] 20141216 file 5.21 is now available mailing-list
- [File] 20150102 file 5.22 is now available mailing-list vendor-advisory
- RHSA-2016:0760 vendor-advisory
- DSA-3121 vendor-advisory
- [oss-security] 20150117 Re: CVE request: file(1) DoS mailing-list
- www.oracle.com
- 71715 vdb-entry
- github.com
- GLSA-201503-08 vendor-advisory
- USN-3686-1 vendor-advisory