CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
CVE-2019-8905- Updated
- 2026-11-02
EUVDEUVD-2019-18293 No score
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
EUVD-2019-18293- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ffw4-28vr-p4x2
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
GHSA-ffw4-28vr-p4x2- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
ALPINE-CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2019-8905
CVE-2019-8905 does not affect BellSoft software
- Record
BELL-CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
Show 8 moreShow less
OSV
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
DEBIAN-CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
- Record
UBUNTU-CVE-2019-8905- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0118 No score
Updated file packages fix security vulnerabilities
The updated file packages fix security vulnerabilities:
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360. (CVE-2019-8905)
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. (CVE-2019-8907)
- Record
MGASA-2019-0118- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0345-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0345-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0571-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0571-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0839-1 No score
Security update for file
This update for file fixes the following issues:
The following security vulnerabilities were addressed:
- Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360).
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)
- Record
SUSE-SU-2019:0839-1- Updated
- 2026-11-02
OSVUSN-3911-1 No score
file vulnerabilities
It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
- Record
USN-3911-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.10 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.11 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.12 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.13 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.14 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.15 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.16 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.17 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.18 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.19 |
before 5.36-r0 | 5.36-r0 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
fileAlpine:v3.20 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.21 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.22 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.23 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.24 |
before 5.36-r0 | 5.36-r0 |
fileAlpine:v3.7 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.8 |
before 5.32-r1 | 5.32-r1 |
fileAlpine:v3.9 |
before 5.36-r0 | 5.36-r0 |
fileDebian:12 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:13 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:14 |
before 1:5.35-3 | 1:5.35-3 |
fileDebian:8 From an advisory covering 2 CVEs |
before 1:5.22+15-2+deb8u5, plus listed versions 1:5.22+15-21:5.22+15-2+deb8u11:5.22+15-2+deb8u21:5.22+15-2+deb8u31:5.22+15-2+deb8u4 |
1:5.22+15-2+deb8u5 |
fileMageia:6 From an advisory covering 2 CVEs |
before 5.25-5.2.mga6 | 5.25-5.2.mga6 |
fileSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
python-magicSUSE:Linux Enterprise Module for Development Tools 15 From an advisory covering 4 CVEs |
before 5.32-7.5.1 | 5.32-7.5.1 |
fileSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
python-magicSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 5.22-10.12.2 | 5.22-10.12.2 |
fileUbuntu:16.04:LTS |
before 1:5.25-2ubuntu1.2, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.1 |
1:5.25-2ubuntu1.2 |
fileUbuntu:18.04:LTS |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 1:5.25-2ubuntu1.2, plus listed versions 1:5.22+15-2ubuntu11:5.25-2ubuntu11:5.25-2ubuntu1.1 |
1:5.25-2ubuntu1.2 |
fileUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 1:5.32-2ubuntu0.2, plus listed versions 1:5.32-11:5.32-21:5.32-2ubuntu0.1 |
1:5.32-2ubuntu0.2 |
fileopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
python-magicopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 5.32-lp150.6.3.1 | 5.32-lp150.6.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-8905 is a medium vulnerability (CVSS 4.4) in File Project File, published February 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 39th percentile. Fixed in file 5.36-r0.
References
securityfocus.com/bid/107137
lists.debian.org/debian-lts-announce/2019/02/msg00044.html
bugs.astron.com/view.php?id=63
lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html
usn.ubuntu.com/3911-1
Show 29 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-8905
github.com/advisories/GHSA-ffw4-28vr-p4x2
security.alpinelinux.org/vuln/CVE-2019-8905
docs.bell-sw.com/security/cves/CVE-2019-8905
security-tracker.debian.org/tracker/CVE-2019-8905
advisories.mageia.org/MGASA-2019-0118.html
bugs.mageia.org/show_bug.cgi?id=24498
lists.fedoraproject.org/archives/list/[email protected]/thread/4JG7FM7W3R4C4P5R4PFNBYEGTQHASG2O
lists.suse.com/pipermail/sle-security-updates/2019-March/005176.html
suse.com/support/update/announcement/2019/suse-su-20190571-1
bugzilla.suse.com/1096974
ubuntu.com/security/CVE-2019-8905
cve.org/CVERecord?id=CVE-2019-8905