[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

[3.6] file: stack based buffer overflow (CVE-2017-1000249)

ID: oval:org.secpod.oval:def:1800129Date: (C)2018-03-28   (M)2022-08-31
Class: PATCHFamily: unix




File versions 5.29, 5.30 and 5.31 contain a stack based buffer overflow when parsing a specially crafted input file. The issue lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary file. Fixed In Version: file 5.32

Platform:
Alpine Linux 3.6
Product:
file
Reference:
7809
CVE-2017-1000249
CVE    1
CVE-2017-1000249
CPE    2
cpe:/o:alpinelinux:alpine_linux:3.6
cpe:/a:fine_free_file_project:file

© SecPod Technologies