Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-10360

Опубликовано: 09 июн. 2018
Источник: redhat
CVSS3: 5.4
EPSS Низкий

Описание

The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5cdrtoolsNot affected
Red Hat Enterprise Linux 5fileNot affected
Red Hat Enterprise Linux 5php53Will not fix
Red Hat Enterprise Linux 5rpmNot affected
Red Hat Enterprise Linux 6fileFix deferred
Red Hat Enterprise Linux 6phpFix deferred
Red Hat Enterprise Linux 7phpFix deferred
Red Hat Enterprise Linux 8fileNot affected
Red Hat Software Collectionsrh-php70-phpNot affected
Red Hat Software Collectionsrh-php71-phpNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1590000file: out-of-bounds read via a crafted ELF file

EPSS

Процентиль: 81%
0.01597
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

CVSS3: 6.5
nvd
больше 7 лет назад

The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

CVSS3: 6.5
debian
больше 7 лет назад

The do_core_note function in readelf.c in libmagic.a in file 5.33 allo ...

CVSS3: 6.5
github
больше 3 лет назад

The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

oracle-oval
почти 6 лет назад

ELSA-2020-1022: file security update (LOW)

EPSS

Процентиль: 81%
0.01597
Низкий

5.4 Medium

CVSS3