Skip to content
OpenAdvisories

Package · Alpine

file

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2019-18218

    cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows …

    file file file Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-1543

    ChaCha20-Poly1305 with long nonces

    ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if i…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-8904

    do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file…

    file file Debian Alpine
  • Unscored —
    CVE-2019-8906

    do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

    file file file Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-8905

    do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a d…

    file file file Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-8907

    do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corrup…

    file file file Debian Ubuntu Alpine