{"id":"CVE-2013-7345","aliases":["DEBIAN-CVE-2013-7345","DSA-2873-1","DSA-3064-1","EUVD-2013-7117","GHSA-63f8-4qqh-pqqj","MGASA-2014-0142","MGASA-2014-0178","RHSA-2014:1013","RHSA-2014:1765","UBUNTU-CVE-2013-7345","USN-2278-1","openSUSE-SU-2024:10290-1","openSUSE-SU-2024:10344-1","openSUSE-SU-2024:11169-1"],"status":"published","title":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0304,"percentile":0.87612,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-03-11T00:00:00Z","modified":"2026-09-01T20:03:19Z","fixes":[{"ecosystem":"Debian:12","package":"file","fixed_in":["1:5.17-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"file","fixed_in":["1:5.17-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"file","fixed_in":["1:5.17-0.1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"file","fixed_in":["5.12-8.3.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"php","fixed_in":["5.4.27-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"php-apc","fixed_in":["3.1.14-7.7.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"php-timezonedb","fixed_in":["2014.2-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"php-gd-bundled","fixed_in":["5.4.27-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"php","fixed_in":["5.5.11-1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"php-apc","fixed_in":["3.1.15-4.2.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"php-timezonedb","fixed_in":["2014.2-1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"file","fixed_in":["1:5.14-2ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.17-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.17-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.17-0.1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-5+squeeze4"}]}],"versions":["5.04-5","5.04-5+squeeze1","5.04-5+squeeze2","5.04-5+squeeze3"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11-2+deb7u2"}]}],"versions":["5.11-2","5.11-2+deb7u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.34-0+deb7u1"}]}],"versions":["5.4.11-1","5.4.15-1","5.4.4-14","5.4.4-14+deb7u1","5.4.4-14+deb7u10","5.4.4-14+deb7u11","5.4.4-14+deb7u12","5.4.4-14+deb7u13","5.4.4-14+deb7u14","5.4.4-14+deb7u2","5.4.4-14+deb7u3","5.4.4-14+deb7u4","5.4.4-14+deb7u5","5.4.4-14+deb7u7","5.4.4-14+deb7u8","5.4.4-14+deb7u9","5.4.4-15","5.4.4-15.1","5.4.6-1","5.4.6-2","5.4.8-1","5.4.9-1","5.4.9-2","5.4.9-3","5.4.9-4"],"bundled":4},{"source":"osv","ecosystem":"Mageia:3","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12-8.3.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.27-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.14-7.7.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"php-timezonedb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"php-gd-bundled","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.27-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.11-1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"php-apc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.15-4.2.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"php-timezonedb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2-1.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-23.el7_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"php54-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.16-22.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.14-2ubuntu3.1"}]}],"versions":["5.11-2ubuntu4","1:5.14-2ubuntu1","1:5.14-2ubuntu2","1:5.14-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.14-2ubuntu3.1"}]}],"versions":["5.11-2ubuntu4","1:5.14-2ubuntu1","1:5.14-2ubuntu2","1:5.14-2ubuntu3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.14-1.4"}]}],"bundled":70},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.28-1.1"}]}],"bundled":71},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-1.1"}]}],"bundled":97}],"products":[{"vendor":"christos_zoulas","product":"file"},{"vendor":"debian","product":"debian_linux"},{"vendor":"php","product":"php"}],"references":[{"url":"https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Third Party Advisory","advisory","evidence","fix","report"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://bugs.gw.com/view.php?id=164","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Exploit","Issue Tracking","Patch","Third Party Advisory","advisory","evidence","fix","report","web"]},{"url":"http://support.apple.com/kb/HT6443","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1765.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2873","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7345","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-63f8-4qqh-pqqj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-7345","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0142.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13105","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-March/130688.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0178.html","tags":["advisory"]},{"url":"http://www.php.net/ChangeLog-5.php#5.4.27","tags":["web"]},{"url":"http://www.php.net/ChangeLog-5.php#5.5.11","tags":["web"]},{"url":"http://pecl.php.net/package-info.php?package=timezonedb\u0026version=2014.2","tags":["web"]},{"url":"http://advisories.mageia.org/MGASA-2014-0142.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13142","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1013","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1107544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1108447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116662","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1013.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7345","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0237","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0237","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0238","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0238","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3487","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3515","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4049","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4721","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1765","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1035670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155071","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1765.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1943","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2270","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2270","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2497","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2497","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2497","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3478","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3538","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3587","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3668","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3668","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3669","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5120","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-7345","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2278-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-0207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3538","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21706","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-7345","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-23T15:00:00Z","modified":"2024-08-06T18:01:20.506Z","updated_at":"2026-11-02T14:34:58.882751Z"}],"euvd":[{"id":"EUVD-2013-7117","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-23T15:00:00Z","modified":"2024-08-06T18:01:20Z","updated_at":"2026-11-03T01:56:23.526026Z"}],"ghsa":[{"id":"GHSA-63f8-4qqh-pqqj","title":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5...","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2022-05-17T04:21:32Z","modified":"2023-01-28T05:01:36Z","updated_at":"2026-11-02T14:43:35.577766Z"}],"nvd":[{"id":"CVE-2013-7345","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-24T16:31:08.167Z","modified":"2026-06-17T00:01:47.907Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:50.049023Z"}],"osv":[{"id":"CVE-2013-7345","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-24T16:31:08Z","modified":"2026-04-16T06:20:57.51421688Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-7345","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-24T16:31:08.167Z","modified":"2026-09-01T20:03:19.318568702Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2873-1","title":"file - several","status":"published","published":"2014-03-11T00:00:00Z","modified":"2026-03-09T01:23:15.460242Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3064-1","title":"php5 - security update","status":"published","published":"2014-11-04T00:00:00Z","modified":"2026-03-09T01:21:54.884628Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0142","title":"Updated file packages fix security vulnerabilities","description":"The BEGIN regular expression in the awk script detector in\nmagic/Magdir/commands in file before 5.15 uses multiple wildcards with\nunlimited repetitions, which allows context-dependent attackers to cause a\ndenial of service (CPU consumption) via a crafted ASCII file that triggers a\nlarge amount of backtracking, as demonstrated via a file with many newline\ncharacters (CVE-2013-7345).\n","status":"published","published":"2014-03-31T19:34:34Z","modified":"2026-04-16T06:25:44.081495432Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0178","title":"Updated php packages fix security vulnerability","description":"Updated php packages fix security vulnerability:\n\nThe BEGIN regular expression in the awk script detector in\nmagic/Magdir/commands in file before 5.15 uses multiple wildcards with\nunlimited repetitions, which allows context-dependent attackers to cause a\ndenial of service (CPU consumption) via a crafted ASCII file that triggers a\nlarge amount of backtracking, as demonstrated via a file with many newline\ncharacters (CVE-2013-7345).\n\nPHP contains a bundled copy of the file utility's libmagic library, so it was\nvulnerable to this issue. It has been updated to versions 5.4.27 and 5.5.11,\nwhich fix this issue and several other bugs.\n\nAlso, the timezonedb PHP PECL module has been updated to its newest version.\n\nAdditionally, php-apc has been rebuilt against the updated php packages.\n","status":"published","published":"2014-04-17T20:20:35Z","modified":"2026-04-16T06:25:51.006429305Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10290-1","title":"apache2-mod_php7-7.0.14-1.4 on GA media","description":"These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:03.261343Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10344-1","title":"apache2-mod_php5-5.6.28-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:15.40421Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11169-1","title":"php8-8.0.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:38.718583Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2014:1013","title":"Red Hat Security Advisory: php security update","status":"published","published":"2024-09-13T09:19:19Z","modified":"2026-06-29T10:07:08Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1765","title":"Red Hat Security Advisory: php54-php security update","status":"published","published":"2024-09-13T09:19:46Z","modified":"2026-06-29T10:07:42Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"UBUNTU-CVE-2013-7345","description":"The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.","status":"published","published":"2014-03-24T00:00:00Z","modified":"2026-04-22T09:25:57.305585Z","updated_at":"2026-11-02T15:54:07.421078Z"},{"id":"USN-2278-1","title":"file vulnerabilities","description":"Mike Frysinger discovered that the file awk script detector used multiple\nwildcard with unlimited repetitions. An attacker could use this issue to\ncause file to consume resources, resulting in a denial of service.\n(CVE-2013-7345)\n\nFrancisco Alonso discovered that file incorrectly handled certain CDF\ndocuments. A attacker could use this issue to cause file to hang or crash,\nresulting in a denial of service. (CVE-2014-0207, CVE-2014-3478,\nCVE-2014-3479, CVE-2014-3480, CVE-2014-3487)\n\nJan Kaluža discovered that file did not properly restrict the amount of\ndata read during regex searches. An attacker could use this issue to\ncause file to consume resources, resulting in a denial of service.\n(CVE-2014-3538)\n","status":"published","published":"2014-07-15T17:43:43Z","modified":"2026-04-22T08:57:56.993289Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}