CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of...
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
CVE-2019-8907- Updated
- 2026-11-02
EUVDEUVD-2019-18295 No score
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
EUVD-2019-18295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qvgv-3xc3-r752
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of...
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
GHSA-qvgv-3xc3-r752- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
ALPINE-CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2019-8907
CVE-2019-8907 does not affect BellSoft software
- Record
BELL-CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSV
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
DEBIAN-CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
- Record
UBUNTU-CVE-2019-8907- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0118 No score
Updated file packages fix security vulnerabilities
The updated file packages fix security vulnerabilities:
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360. (CVE-2019-8905)
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. (CVE-2019-8907)
- Record
MGASA-2019-0118- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0345-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0345-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10755-1 No score
file-5.40-1.14 on GA media
These are all security issues fixed in the file-5.40-1.14 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10755-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0571-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0571-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0839-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360).
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0839-1- Updated
- 2026-11-02
OSVUSN-3911-1 No score
file vulnerabilities
It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
- Record
USN-3911-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.10 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.11 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.12 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.13 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.14 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.15 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.16 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.17 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.18 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.19 |
before 5.36-r0 | 5.36-r0 |
Show 33 moreShow less
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.20 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.21 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.22 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.23 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.24 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.7 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.8 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.9 |
before 5.36-r0 | 5.36-r0 |
fileDebian:12 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:13 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:14 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:8 From an advisory covering 2 CVEs |
before 1:5.22+15-2+deb8u5, plus listed versions 1:5.22+15-21:5.22+15-2+deb8u11:5.22+15-2+deb8u21:5.22+15-2+deb8u31:5.22+15-2+deb8u4 |
1:5.22+15-2+deb8u5 |
fileMageia:6 From an advisory covering 2 CVEs |
before 5.25-5.2.mga6 | 5.25-5.2.mga6 |
fileSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Development Tools 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
fileSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileUbuntu:16.04:LTS |
before 1:5.25-2ubuntu1.2, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.1 |
1:5.25-2ubuntu1.2 |
fileUbuntu:18.04:LTS |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 1:5.25-2ubuntu1.2, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.1 |
1:5.25-2ubuntu1.2 |
fileUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
python-magicopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
fileopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 5.40-1.14 | 5.40-1.14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-8907 is a high vulnerability (CVSS 8.8) in File Project File, published February 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.46%, the 89th percentile. Fixed in file 5.36-r0.
References
bugs.astron.com/view.php?id=65
lists.debian.org/debian-lts-announce/2019/02/msg00044.html
lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html
usn.ubuntu.com/3911-1
nvd.nist.gov/vuln/detail/CVE-2019-8907
Show 33 moreShow less
github.com/advisories/GHSA-qvgv-3xc3-r752
security.alpinelinux.org/vuln/CVE-2019-8907
docs.bell-sw.com/security/cves/CVE-2019-8907
security-tracker.debian.org/tracker/CVE-2019-8907
advisories.mageia.org/MGASA-2019-0118.html
bugs.mageia.org/show_bug.cgi?id=24498
lists.fedoraproject.org/archives/list/[email protected]/thread/4JG7FM7W3R4C4P5R4PFNBYEGTQHASG2O
lists.suse.com/pipermail/sle-security-updates/2019-March/005176.html
suse.com/support/update/announcement/2019/suse-su-20190571-1
bugzilla.suse.com/1096974
ubuntu.com/security/CVE-2019-8907
cve.org/CVERecord?id=CVE-2019-8907