file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade fileUpgrade php | Aug 30, 2017 | Jul 3, 2014 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-004 | Aug 28, 2015 | Jul 3, 2014 |
| Apple Osx Php | — | Apply OS X security update 2015-004Upgrade macOS to the latest version | Mar 29, 2016 | Jul 3, 2014 |
| Centos_linux | — | Upgrade php-mbstringUpgrade php-recodeUpgrade php-odbcUpgrade phpUpgrade php-cliUpgrade php-processUpgrade php-intlUpgrade php-snmpUpgrade php-dbaUpgrade php-xmlUpgrade php-commonUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-mysqlUpgrade php-ldapUpgrade php-gdUpgrade php-fpmUpgrade php-develUpgrade php-xmlrpcUpgrade php-soapUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-enchantUpgrade php-pspellUpgrade php-pdo | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade fileUpgrade php5 | Jul 30, 2024 | Jul 3, 2014 |
| Oracle Solaris | — | Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-mysql to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-pear to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-zendopcache to version 7.0.2-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-common to version 11.1-0.175.2.8.0.3.0 on Solaris 11.2 | May 29, 2017 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade php-recodeUpgrade php-embeddedUpgrade php-xmlUpgrade php-mysqlndUpgrade php-fpmUpgrade python-magicUpgrade php-enchantUpgrade php-cliUpgrade file-develUpgrade file-staticUpgrade php-xmlrpcUpgrade fileUpgrade php-snmpUpgrade phpUpgrade php-develUpgrade php-pdoUpgrade php-ldapUpgrade php-mbstringUpgrade php-pspellUpgrade php-commonUpgrade php-intlUpgrade php-gdUpgrade php-processUpgrade php-odbcUpgrade php-pgsqlUpgrade php-soapUpgrade php-dbaUpgrade file-libsUpgrade php-bcmathUpgrade php-mysql | May 12, 2016 | Jul 3, 2014 |
| Php | — | Upgrade to PHP version 5.4.32Upgrade to PHP version 5.5.16 | Jan 23, 2023 | Jul 3, 2014 |
| Suse | — | Upgrade php7-posixUpgrade php7-xmlreaderUpgrade php7-sqliteUpgrade php7-exifUpgrade php7-dbaUpgrade php7Upgrade php7-zipUpgrade php7-mysqlUpgrade php7-socketsUpgrade php7-odbcUpgrade php7-ldapUpgrade php7-xmlrpcUpgrade php7-domUpgrade php7-gdUpgrade php7-gmpUpgrade php7-zlibUpgrade php7-pear-archive_tarUpgrade php7-develUpgrade php7-sysvshmUpgrade apache2-mod_php7Upgrade php7-jsonUpgrade php7-sysvmsgUpgrade php7-bz2Upgrade php7-imapUpgrade php7-xslUpgrade php7-soapUpgrade php7-pdoUpgrade php72-develUpgrade php7-mbstringUpgrade php7-shmopUpgrade php7-gettextUpgrade php7-mcryptUpgrade php7-wddxUpgrade php7-pharUpgrade php7-fastcgiUpgrade php7-sysvsemUpgrade php7-tokenizerUpgrade php7-pearUpgrade php7-bcmathUpgrade php7-enchantUpgrade php7-opensslUpgrade php7-pgsqlUpgrade php7-fileinfoUpgrade php7-curlUpgrade php7-calendarUpgrade php7-xmlwriterUpgrade php7-fpmUpgrade php7-intlUpgrade php7-ftpUpgrade php7-pcntlUpgrade php7-opcacheUpgrade php7-iconvUpgrade php7-ctypeUpgrade php7-snmpUpgrade php7-pspell | Dec 9, 2016 | Jul 3, 2014 |
| Ubuntu | — | Upgrade fileUpgrade libmagic1 | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub