Summary
It was discovered that file incorrectly handled certain malformed ELF
files. An attacker could use this issue to cause a denial of service, or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | file | 1:5.25-2ubuntu1.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | file | 1:5.32-2ubuntu0.2 |
Vulnerabilities 3
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a d…
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corrup…