Описание
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
A flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | cdrtools | Not affected | ||
| Red Hat Enterprise Linux 5 | file | Will not fix | ||
| Red Hat Enterprise Linux 5 | php53 | Not affected | ||
| Red Hat Enterprise Linux 5 | rpm | Will not fix | ||
| Red Hat Enterprise Linux 6 | php | Not affected | ||
| Red Hat Enterprise Linux 7 | file | Will not fix | ||
| Red Hat Enterprise Linux 7 | php | Not affected | ||
| Red Hat Software Collections | php54-php | Not affected | ||
| Red Hat Software Collections | php55-php | Not affected | ||
| Red Hat Software Collections | rh-php56-php | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
1.9 Low
CVSS2
Связанные уязвимости
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
The ELF parser in file 5.08 through 5.21 allows remote attackers to ca ...
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
EPSS
1.9 Low
CVSS2