CVE-2019-8907

Опубликовано: 18 фев. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html
https://bugs.astron.com/view.php?id=65
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html
Third Party Advisory
https://usn.ubuntu.com/3911-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html
https://bugs.astron.com/view.php?id=65
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html
Third Party Advisory
https://usn.ubuntu.com/3911-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:file_project:file:5.35:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00845

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-8907

CVSS3: 8.8

ubuntu

почти 7 лет назад

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

CVE-2019-8907

CVSS3: 5.4

redhat

около 7 лет назад

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

CVE-2019-8907

CVSS3: 8.8

debian

почти 7 лет назад

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote att ...

GHSA-qvgv-3xc3-r752

CVSS3: 8.8

github

больше 3 лет назад

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

BDU:2020-01886

CVSS3: 8.8

fstec

почти 7 лет назад

Уязвимость функции do_core_note утилиты для определения типа заданных файлов File, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 74%

0.00845

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787