cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-filealma-upgrade-file-develalma-upgrade-file-libsalma-upgrade-python3-magic | May 4, 2022 | Oct 21, 2019 | |
| Alpine Linux | alpine-linux-upgrade-file | Nov 27, 2019 | Oct 21, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-fileamazon-linux-ami-2-upgrade-file-debuginfoamazon-linux-ami-2-upgrade-file-develamazon-linux-ami-2-upgrade-file-libsamazon-linux-ami-2-upgrade-file-staticamazon-linux-ami-2-upgrade-python-magic | Apr 27, 2020 | Oct 21, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-fileamazon-linux-upgrade-php72amazon-linux-upgrade-php73 | Dec 20, 2019 | Oct 21, 2019 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Oct 21, 2019 | |
| Centos_linux | — | centos-upgrade-filecentos-upgrade-file-debuginfocentos-upgrade-file-debugsourcecentos-upgrade-file-libscentos-upgrade-file-libs-debuginfocentos-upgrade-python3-magic | Nov 10, 2021 | Oct 21, 2019 |
| Debian | debian-upgrade-file | Oct 25, 2019 | Oct 21, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-file | Mar 16, 2020 | Oct 21, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-filehuawei-euleros-2_0_sp2-upgrade-file-libshuawei-euleros-2_0_sp2-upgrade-python-magic | Dec 4, 2019 | Oct 21, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-filehuawei-euleros-2_0_sp3-upgrade-file-libshuawei-euleros-2_0_sp3-upgrade-python-magic | Apr 16, 2020 | Oct 21, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-filehuawei-euleros-2_0_sp5-upgrade-file-libshuawei-euleros-2_0_sp5-upgrade-python-magic | Dec 11, 2019 | Oct 21, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-filehuawei-euleros-2_0_sp8-upgrade-file-libshuawei-euleros-2_0_sp8-upgrade-python3-magic | Nov 28, 2019 | Oct 21, 2019 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-web-php-56-5-6-39-0-175-3-36-0-19-0oracle-solaris-11-3-upgrade-web-php-71-7-1-25-0-175-3-36-0-19-0oracle-solaris-11-4-upgrade-web-php-71-7-1-33-11-4-16-0-1-3-0oracle-solaris-11-4-upgrade-web-php-73-7-3-11-11-4-16-0-1-3-0 | Dec 18, 2019 | Oct 21, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-fileoracle-linux-upgrade-file-develoracle-linux-upgrade-file-libsoracle-linux-upgrade-python3-magic | Nov 17, 2021 | Aug 26, 2019 |
| Redhat_linux | redhat-upgrade-fileredhat-upgrade-file-debuginforedhat-upgrade-file-debugsourceredhat-upgrade-file-develredhat-upgrade-file-libsredhat-upgrade-file-libs-debuginforedhat-upgrade-python3-magic | Nov 10, 2021 | Oct 21, 2019 | |
| Rocky_linux | rocky-upgrade-filerocky-upgrade-file-debuginforocky-upgrade-file-debugsourcerocky-upgrade-file-develrocky-upgrade-file-libsrocky-upgrade-file-libs-debuginfo | Mar 12, 2024 | Oct 21, 2019 | |
| Suse | — | suse-upgrade-filesuse-upgrade-file-develsuse-upgrade-file-devel-32bitsuse-upgrade-file-magicsuse-upgrade-libmagic1suse-upgrade-libmagic1-32bitsuse-upgrade-python-magicsuse-upgrade-python2-magicsuse-upgrade-python3-magic | May 23, 2020 | Oct 21, 2019 |
| Ubuntu | ubuntu-pro-upgrade-fileubuntu-pro-upgrade-libmagic1ubuntu-upgrade-fileubuntu-upgrade-libmagic1 | Oct 31, 2019 | Oct 21, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub