file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade file | Sep 20, 2017 | Jul 17, 2012 |
| Centos_linux | — | Upgrade php-intlUpgrade php53-cliUpgrade php-odbcUpgrade php53-bcmathUpgrade php53-mysqlUpgrade php-snmpUpgrade php-tidyUpgrade php53-commonUpgrade php53-pgsqlUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php53-processUpgrade php53-intlUpgrade php53-develUpgrade php-mysqlUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php53-ldapUpgrade php53-xmlrpcUpgrade php-ldapUpgrade php53-snmpUpgrade php-develUpgrade php-bcmathUpgrade php-soapUpgrade php53-dbaUpgrade php53-odbcUpgrade php53Upgrade php53-imapUpgrade php-ztsUpgrade php-recodeUpgrade php53-pspellUpgrade php53-soapUpgrade php-processUpgrade phpUpgrade php53-gdUpgrade php53-pdoUpgrade php-enchantUpgrade php-imapUpgrade php53-xmlUpgrade php-dbaUpgrade php-fpmUpgrade php-embeddedUpgrade php-pdoUpgrade php-pspellUpgrade php53-mbstringUpgrade php-gd | Dec 1, 2016 | Jul 17, 2012 |
| Debian | — | Upgrade file | Jul 30, 2024 | Jul 17, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 2, 2015 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Aug 11, 2016 |
| Gentoo Linux | — | Upgrade sys-apps/file. | Oct 30, 2017 | Jul 17, 2012 |
| Oracle_linux | — | Upgrade python-magicUpgrade fileUpgrade file-develUpgrade file-staticUpgrade file-libs | May 12, 2016 | Jul 17, 2012 |
| Suse | — | Upgrade file-magicUpgrade fileUpgrade libmagic1-32bitUpgrade libmagic1Upgrade file-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagic1Upgrade file | Nov 8, 2024 | Jul 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub