Skip to content
OpenAdvisories
Unscored USN-2494-1 3 CVEs

file vulnerabilities

Published Feb 4, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Francisco Alonso discovered that file incorrectly handled certain ELF
files. An attacker could use this issue to cause file to crash, resulting
in a denial of service. (CVE-2014-3710)

Thomas Jarosch discovered that file incorrectly handled certain ELF files.
An attacker could use this issue to cause file to hang or crash, resulting
in a denial of service. (CVE-2014-8116)

Thomas Jarosch discovered that file incorrectly limited recursion. An
attacker could use this issue to cause file to hang or crash, resulting in
a denial of service. (CVE-2014-8117)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS file 1:5.14-2ubuntu3.3

Vulnerabilities 3

  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-8116

    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-8117

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

    php5 file file Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3710
  • report
    https://ubuntu.com/security/CVE-2014-8116
  • report
    https://ubuntu.com/security/CVE-2014-8117