CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is...
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
CVE-2019-8906- Updated
- 2026-11-02
EUVDEUVD-2019-18294 No score
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
EUVD-2019-18294- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gc52-2h3f-7mvf
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is...
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
GHSA-gc52-2h3f-7mvf- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
ALPINE-CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2019-8906
CVE-2019-8906 does not affect BellSoft software
- Record
BELL-CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
Show 7 moreShow less
OSV
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
DEBIAN-CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- Record
UBUNTU-CVE-2019-8906- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0345-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0345-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0571-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0571-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0839-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360).
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0839-1- Updated
- 2026-11-02
OSVUSN-3911-1 No score
file vulnerabilities
It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
- Record
USN-3911-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.10 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.11 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.12 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.13 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.14 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.15 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.16 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.17 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.18 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.19 |
before 5.36-r0 | 5.36-r0 |
Show 29 moreShow less
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.20 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.21 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.22 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.23 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.24 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.7 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.8 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.9 |
before 5.36-r0 | 5.36-r0 |
fileDebian:12 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:13 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:14 |
before 1:5.35-3 | 1:5.35-3 |
fileSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Development Tools 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
fileSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileUbuntu:18.04:LTS |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 1:5.25-2ubuntu1.2, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.1 |
1:5.25-2ubuntu1.2 |
fileUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
python-magicopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-8906 is a medium vulnerability (CVSS 4.4) in File Project File, published February 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in file 5.36-r0.
References
bugs.astron.com/view.php?id=64
github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f
lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html
usn.ubuntu.com/3911-1
support.apple.com/kb/HT209599
Show 26 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-8906
security.alpinelinux.org/vuln/CVE-2019-8906
docs.bell-sw.com/security/cves/CVE-2019-8906
security-tracker.debian.org/tracker/CVE-2019-8906
suse.com/support/update/announcement/2019/suse-su-20190571-1
bugzilla.suse.com/1096974
ubuntu.com/security/CVE-2019-8906
cve.org/CVERecord?id=CVE-2019-8906