The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade file-staticUpgrade python-magicUpgrade file-debuginfoUpgrade file-libsUpgrade file-develUpgrade file | Jul 21, 2020 | Jun 11, 2018 |
| Centos_linux | — | Upgrade file-debuginfoUpgrade python-magicUpgrade file-libsUpgrade fileUpgrade file-develUpgrade file-static | Apr 1, 2020 | Jun 11, 2018 |
| Debian | — | Upgrade file | Jul 30, 2024 | Jun 11, 2018 |
| Gentoo Linux | — | Upgrade sys-apps/file. | Jun 25, 2018 | Jun 11, 2018 |
| Oracle_linux | — | Upgrade python-magicUpgrade file-libsUpgrade fileUpgrade file-develUpgrade file-static | Oct 5, 2022 | Jun 9, 2018 |
| Redhat_linux | — | Upgrade file-staticUpgrade file-libsNo solution existsUpgrade fileUpgrade file-debuginfoUpgrade python-magicUpgrade file-devel | Apr 1, 2020 | Jun 11, 2018 |
| Suse | — | Upgrade php5-domUpgrade php5-intlUpgrade python-magicUpgrade php53-domUpgrade php53-wddxUpgrade php5-xslUpgrade php53-xmlwriterUpgrade php53-posixUpgrade php53-intlUpgrade php53-mysqlUpgrade php53-ftpUpgrade php53-soapUpgrade php53-opensslUpgrade php53-xmlrpcUpgrade php53-tokenizerUpgrade libmagic1Upgrade libmagic1-32bitUpgrade php5-fpmUpgrade python2-magicUpgrade php5-suhosinUpgrade php5-gdUpgrade php53-jsonUpgrade php5-exifUpgrade php5-posixUpgrade php5-tokenizerUpgrade php5-sysvshmUpgrade file-magicUpgrade php53Upgrade php5-pspellUpgrade php5-ctypeUpgrade php53-develUpgrade php5-ldapUpgrade file-devel-32bitUpgrade php53-pspellUpgrade php5-curlUpgrade apache2-mod_php5Upgrade php53-gettextUpgrade php5-pgsqlUpgrade php53-sysvsemUpgrade php53-xslUpgrade php53-pcntlUpgrade php53-exifUpgrade php5-wddxUpgrade php5-dbaUpgrade php5-xmlrpcUpgrade php5-iconvUpgrade fileUpgrade php5-sqliteUpgrade php5-mbstringUpgrade php5-zlibUpgrade apache2-mod_php53Upgrade php53-fileinfoUpgrade php5-pearUpgrade php5-enchantUpgrade php53-sysvmsgUpgrade php5-fileinfoUpgrade php5-sysvmsgUpgrade php5-zipUpgrade php5-socketsUpgrade php5-imapUpgrade php5-xmlwriterUpgrade php5-jsonUpgrade php53-ldapUpgrade php5-mcryptUpgrade python3-magicUpgrade php5-mysqlUpgrade php5-xmlreaderUpgrade php5-calendarUpgrade php53-shmopUpgrade php5Upgrade php53-bcmathUpgrade php5-bcmathUpgrade php5-develUpgrade php5-bz2Upgrade php5-gettextUpgrade php53-bz2Upgrade php53-mbstringUpgrade php53-pearUpgrade php53-tidyUpgrade php5-opcacheUpgrade php53-gmpUpgrade php5-fastcgiUpgrade php53-sqliteUpgrade php5-pcntlUpgrade php53-curlUpgrade php5-pharUpgrade php53-odbcUpgrade php5-pdoUpgrade php53-socketsUpgrade php53-sysvshmUpgrade php53-iconvUpgrade php5-soapUpgrade php53-readlineUpgrade php53-mcryptUpgrade php53-xmlreaderUpgrade php53-ctypeUpgrade php53-pgsqlUpgrade php5-sysvsemUpgrade php5-shmopUpgrade php53-gdUpgrade php5-snmpUpgrade php53-pdoUpgrade php53-fastcgiUpgrade php53-snmpUpgrade php53-suhosinUpgrade php53-zlibUpgrade php5-odbcUpgrade file-develUpgrade php53-dbaUpgrade php5-ftpUpgrade php53-calendarUpgrade php5-opensslUpgrade php5-gmpUpgrade php53-zipUpgrade php53-imap | Jul 25, 2018 | Jun 11, 2018 |
| Ubuntu | — | Upgrade libmagic1Upgrade file | Jun 27, 2018 | Jun 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub