The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade file | Aug 30, 2017 | Dec 17, 2014 |
| Debian | — | Upgrade file | Jul 30, 2024 | Dec 17, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 22, 2015 |
| Freebsd | — | Upgrade fileUpgrade FreeBSD | Dec 10, 2025 | Jan 2, 2015 |
| Oracle_linux | — | Upgrade file-libsUpgrade python-magicUpgrade file-staticUpgrade file-develUpgrade file | May 12, 2016 | Dec 17, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 16, 2014 |
| Suse | — | Upgrade fileUpgrade file-develUpgrade libmagic1Upgrade libmagic1-32bitUpgrade python-magicUpgrade file-magic | Dec 18, 2015 | Dec 17, 2014 |
| Ubuntu | — | Upgrade file | Nov 8, 2024 | Dec 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub