file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade file | Sep 20, 2017 | Jul 17, 2012 |
| Centos_linux | — | Upgrade php-develUpgrade php53-dbaUpgrade php53-odbcUpgrade php-recodeUpgrade php-bcmathUpgrade phpUpgrade php-ztsUpgrade php53-snmpUpgrade php-embeddedUpgrade php-fpmUpgrade php53-pdoUpgrade php-imapUpgrade php53-mbstringUpgrade php-soapUpgrade php-gdUpgrade php-dbaUpgrade php-processUpgrade php-enchantUpgrade php-pspellUpgrade php53-soapUpgrade php53-xmlUpgrade php-pdoUpgrade php53-gdUpgrade php53Upgrade php53-pspellUpgrade php53-imapUpgrade php-ldapUpgrade php53-develUpgrade php53-mysqlUpgrade php53-bcmathUpgrade php-xmlUpgrade php-tidyUpgrade php-xmlrpcUpgrade php-commonUpgrade php53-commonUpgrade php-cliUpgrade php53-pgsqlUpgrade php53-ldapUpgrade php53-cliUpgrade php-mysqlUpgrade php53-xmlrpcUpgrade php53-intlUpgrade php-odbcUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-intlUpgrade php53-processUpgrade php-snmp | Dec 1, 2016 | Jul 17, 2012 |
| Debian | — | Upgrade file | Jul 30, 2024 | Jul 17, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 2, 2015 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Aug 11, 2016 |
| Gentoo Linux | — | Upgrade sys-apps/file. | Oct 30, 2017 | Jul 17, 2012 |
| Oracle_linux | — | Upgrade file-develUpgrade file-staticUpgrade file-libsUpgrade python-magicUpgrade file | May 12, 2016 | Jul 17, 2012 |
| Suse | — | Upgrade libmagic1-32bitUpgrade fileUpgrade file-magicUpgrade libmagic1Upgrade file-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagic1Upgrade file | Nov 8, 2024 | Jul 17, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub