Skip to content
File Project vulnerabilities
Newest
-
file project file, debian linux +1 more
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is...
CVE-2022-48554
Fix available
5.5 Medium
-
file project file, canonical ubuntu linux, debian linux +3 more +5 more
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...
CVE-2019-18218
Fix available
7.8 High
-
file project file, canonical ubuntu linux +1 more
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...
CVE-2019-8904
Fix available
8.8 High
-
file project file, canonical ubuntu linux, debian linux +1 more +3 more
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of...
CVE-2019-8907
Fix available
8.8 High
-
file project file, apple iphone os, mac os x +4 more +6 more
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is...
CVE-2019-8906
Fix available
4.4 Medium
-
file project file, canonical ubuntu linux, debian linux +1 more +3 more
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...
CVE-2019-8905
Fix available
4.4 Medium
-
file project file, canonical ubuntu linux, opensuse leap +2 more
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to...
CVE-2018-10360
Fix available
6.5 Medium
-
file project file
An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016)...
CVE-2017-1000249
Fix available
5.5 Medium
-
file project file, php, debian linux +2 more
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x...
CVE-2014-9653
Fix available
7.5 High
-
file project file
The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via...
CVE-2014-9621
Fix available
5.0 Medium
-
file project file
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via...
CVE-2014-9620
Fix available
5.0 Medium
-
file project file, canonical ubuntu linux, freebsd +1 more +3 more
The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of...
CVE-2014-8116
Fix available
5.0 Medium
-
file project file, php +1 more
The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...
CVE-2014-9652
Fix available
5.0 Medium
-
file project file, php, debian linux +1 more +3 more
The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...
CVE-2014-3487
Fix available
EPSS 14.9%
4.3 Medium
-
file project file, php, debian linux +1 more +3 more
The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...
CVE-2014-3480
Fix available
EPSS 11.5%
4.3 Medium
-
file project file, php, debian linux +1 more +3 more
The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...
CVE-2014-3479
Fix available
EPSS 14.9%
4.3 Medium
-
file project file, canonical ubuntu linux, debian linux +2 more +4 more
softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...
CVE-2014-2270
Fix available
4.3 Medium
-
file project file, canonical ubuntu linux, freebsd +1 more +3 more
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers...
CVE-2014-8117
Fix available
5.0 Medium