Информационная безопасность
[RU] switch to English


Уязвимости безопасности в libmagic / file / fileinfo / PHP
дополнено с 10 декабря 2014 г.
Опубликовано:18 марта 2015 г.
Источник:
SecurityVulns ID:14140
Тип:библиотека
Уровень опасности:
5/10
Описание:Уязвимости при разборе ELF.
CVE:CVE-2014-9653 (readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.)
 CVE-2014-8117 (softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.)
 CVE-2014-8116 (The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.)
Оригинальный текстdocumentDEBIAN, [SECURITY] [DSA 3196-1] file security update (18.03.2015)
 documentFREEBSD, FreeBSD Security Advisory FreeBSD-SA-14:28.file (10.12.2014)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород