softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade file | Aug 30, 2017 | Dec 17, 2014 |
| Debian | — | Upgrade fileUpgrade php5 | Jul 30, 2024 | Dec 17, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 22, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade file | Dec 10, 2025 | Jan 2, 2015 |
| Gentoo Linux | — | Upgrade sys-apps/file. | Oct 30, 2017 | Dec 17, 2014 |
| Oracle_linux | — | Upgrade file-staticUpgrade fileUpgrade python-magicUpgrade file-libsUpgrade file-devel | May 12, 2016 | Dec 17, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2014 |
| Suse | — | Upgrade file-develUpgrade python-magicUpgrade file-magicUpgrade libmagic1-32bitUpgrade libmagic1Upgrade file | Dec 18, 2015 | Dec 17, 2014 |
| Ubuntu | — | Upgrade fileUpgrade php5-enchantUpgrade libapache2-mod-php5Upgrade php5-fpmUpgrade php5-cliUpgrade php5-cgi | Nov 8, 2024 | Dec 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub