Skip to content
OpenAdvisories
Medium RHSA-2015:2155 14 CVEs

Red Hat Security Advisory: file security and bug fix update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client file 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client file-debuginfo 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client file-devel 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client file-libs 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client file-static 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client python-magic 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode file 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode file-debuginfo 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode file-devel 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode file-libs 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode file-static 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode python-magic 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server file 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server file-debuginfo 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server file-devel 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server file-libs 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server file-static 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server python-magic 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation file 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation file-debuginfo 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation file-devel 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation file-libs 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation file-static 0:5.11-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation python-magic 0:5.11-31.el7

Vulnerabilities 14

  • Medium 6.5
    CVE-2014-0207 EPSS 17%

    The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3478 EPSS 15%

    Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP b…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3480 EPSS 11%

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-0237 EPSS 20%

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 al…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-0238 EPSS 21%

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 all…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-3479 EPSS 15%

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3487 EPSS 15%

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3538 EPSS 12%

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-8116

    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-8117

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-9652

    The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-9653

    readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x b…

    file file Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1064167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1091842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1094648
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104869
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1107544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1155071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1157850
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161911
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1174606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1188599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1190116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1224667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1224668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1255396
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2155.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0207
  • report
    https://access.redhat.com/security/cve/CVE-2014-0237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0237
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0237
  • report
    https://access.redhat.com/security/cve/CVE-2014-0238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0238
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0238
  • report
    https://access.redhat.com/security/cve/CVE-2014-3478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3478
  • report
    https://access.redhat.com/security/cve/CVE-2014-3479
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3479
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3479