Skip to content
OpenAdvisories
Unscored DLA-50-1 2 CVEs

file - security update

Published Sep 10, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 file 5.04-5+squeeze7

Vulnerabilities 2

  • Unscored —
    CVE-2014-3538 EPSS 12%

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…

  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…