pkg:Debian/file

所有已知漏洞

• CRITICAL9.8CVE-2009-0948Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.
  from 0, < 5.02-1
• CRITICAL9.8CVE-2009-0947Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.
  from 0, < 5.02-1
• HIGH8.8CVE-2019-8907do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application…
  from 0, < 1:5.35-3
• HIGH8.8CVE-2019-8904do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
  from 0, < 1:5.35-3
• HIGH7.8CVE-2019-18218file - security update
  from 0, < 1:5.22+15-2+deb8u6
• HIGH7.8CVE-2019-18218file - security update
  from 0, < 1:5.30-1+deb9u3
• HIGH7.8CVE-2019-18218file - security update
  from 0, < 1:5.37-6
• HIGH7.5CVE-2014-0236file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer…
  from 0, < 1:5.19-1
• HIGH7.3CVE-2015-8865php5 - security update
  from 0, < 1:5.24-1
• HIGH7.3CVE-2015-8865php5 - security update
  from 0, < 5.11-2+deb7u9
• MEDIUM6.5CVE-2018-10360The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read…
  from 0, < 1:5.33-3
• MEDIUM6.5CVE-2014-3480The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14,…
  from 0, < 1:5.19-1
• MEDIUM6.5CVE-2014-3478Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5…
  from 0, < 1:5.19-1
• MEDIUM6.5CVE-2014-0207file - security update
  from 0, < 5.04-5+squeeze6
• MEDIUM6.5CVE-2014-0207file - security update
  from 0, < 5.11-2+deb7u4
• MEDIUM6.5CVE-2014-0207file - security update
  from 0, < 1:5.19-1
• MEDIUM6.5CVE-2012-1571file - missing bounds check
  from 0, < 5.11-1
• MEDIUM6.5CVE-2012-1571file - missing bounds check
  from 0, < 5.04-5+squeeze1
• MEDIUM5.5CVE-2022-48554file - security update
  from 0, < 1:5.39-3+deb11u1
• MEDIUM5.5CVE-2022-48554file - security update
  from 0, < 1:5.39-3+deb11u1
• MEDIUM5.5CVE-2017-1000249file - security update
  from 0, < 1:5.30-1+deb9u1
• MEDIUM5.5CVE-2017-1000249file - security update
  from 0, < 1:5.32-1
• MEDIUM4.4CVE-2019-8906do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
  from 0, < 1:5.35-3
• MEDIUM4.4CVE-2019-8905file - security update
  from 0, < 1:5.35-3
• MEDIUM4.4CVE-2019-8905file - security update
  from 0, < 1:5.22+15-2+deb8u5
• —CVE-2014-9653file - security update
  from 0, < 1:5.22+15-1
• —CVE-2014-9653file - security update
  from 0, < 5.04-5+squeeze10
• —CVE-2014-9653file - security update
  from 0, < 5.11-2+deb7u8
• —CVE-2014-9652php5 - security update
  from 0, < 1:5.21+15-1
• —CVE-2014-9621The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.
  from 0, < 1:5.21+15-1
• —CVE-2014-9620The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
  from 0, < 1:5.21+15-1
• —CVE-2014-8117softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumpt…
  from 0, < 1:5.21+15-1
• —CVE-2014-8116file - security update
  from 0, < 5.04-5+squeeze9
• —CVE-2014-8116file - security update
  from 0, < 1:5.21+15-1
• —CVE-2014-8116file - security update
  from 0, < 5.11-2+deb7u7
• —CVE-2014-3710php5 - security update
  from 0, < 5.04-5+squeeze8
• —CVE-2014-3710php5 - security update
  from 0, < 1:5.20-2
• —CVE-2014-3710php5 - security update
  from 0, < 5.11-2+deb7u6
• —CVE-2014-3587Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.…
  from 0, < 1:5.19-2
• —CVE-2014-3487The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, do…
  from 0, < 1:5.19-1
• —CVE-2014-3479The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before…
  from 0, < 1:5.19-1
• —CVE-2014-3538php5 - security update
  from 0, < 1:5.19-1
• —CVE-2014-3538php5 - security update
  from 0, < 5.04-5+squeeze7
• —CVE-2014-0238The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers…
  from 0, < 1:5.19-1
• —CVE-2014-0237php5 - security update
  from 0, < 1:5.19-1
• —CVE-2013-7345php5 - security update
  from 0, < 5.04-5+squeeze4
• —CVE-2013-7345php5 - security update
  from 0, < 1:5.17-0.1
• —CVE-2014-2270softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access a…
  from 0, < 1:5.17-1
• —CVE-2014-1943php5 - denial of service
  from 0, < 1:5.17-0.1
• —CVE-2014-1943php5 - denial of service
  from 0, < 5.04-5+squeeze3
• —CVE-2009-3930Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a mal…
  from 0, < 5.03-1
• —CVE-2009-2830Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers t…
  from 0, < 5.03-1
• —CVE-2009-1515Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to…
  from 0, < 5.02-1
• —CVE-2007-2799file
  from 0, < 4.12-1sarge2
• —CVE-2007-2799file
  from 0, < 4.17-5etch3
• —CVE-2007-2799file
  from 0, < 4.21-1
• —CVE-2007-2026The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafte…
  from 0, < 4.20-6
• —CVE-2007-1536file - buffer overflow
  from 0, < 4.20-1
• —CVE-2007-1536file - buffer overflow
  from 0, < 4.12-1sarge1
• —CVE-2004-1304Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF…
  from 0, < 4.12
• —CVE-2003-1092Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to "a m…
  from 0, < 3.4.1
• —CVE-2003-0102file - buffer overflow
  from 0, < 3.37-3.1.woody.1
• —CVE-2003-0102file - buffer overflow
  from 0, < 3.40-1.1