[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2015-497 --- file python26-magic python27-magic

ID: oval:org.secpod.oval:def:1200084Date: (C)2015-12-28   (M)2024-02-19
Class: PATCHFamily: unix




The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes. The ELF parser in file before 5.21 allows remote attackers to cause a denial of service via a large number of program or section headers or invalid capabilities. It was reported that a malformed elf file can cause file urility to access invalid memory. The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string. softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service via unspecified vectors

Platform:
Amazon Linux AMI
Product:
file
python26-magic
python27-magic
Reference:
ALAS-2015-497
CVE-2014-9620
CVE-2014-8116
CVE-2014-9653
CVE-2014-9621
CVE-2014-8117
CVE    5
CVE-2014-8116
CVE-2014-8117
CVE-2014-9621
CVE-2014-9620
...
CPE    2
cpe:/o:amazon:linux
cpe:/a:fine_free_file_project:fine_free_file

© SecPod Technologies