Skip to content
OpenAdvisories
Unscored DSA-3121-1 4 CVEs

file - security update

Published Jan 8, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 file 5.11-2+deb7u7

Vulnerabilities 4

  • Unscored —

    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or…

  • Unscored —

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

  • Unscored —

    The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of not…

  • Unscored —

    The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x…