Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3587HistoryAug 23, 2014 - 1:55 a.m.
CVE-2014-3587
2014-08-2301:55:01
Debian Security Bug Tracker
security-tracker.debian.org
28
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.3%
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | file | < 1:5.19-2 | file_1:5.19-2_all.deb |
| Debian | 11 | all | file | < 1:5.19-2 | file_1:5.19-2_all.deb |
| Debian | 999 | all | file | < 1:5.19-2 | file_1:5.19-2_all.deb |
| Debian | 13 | all | file | < 1:5.19-2 | file_1:5.19-2_all.deb |
Related
prion
prion
Integer overflow
2014-08-23 01:55:00
Out-of-bounds
2012-07-17 21:55:00
amazon
amazon
Medium: file
2014-09-03 14:38:00
Medium: php55
2014-09-18 21:03:00
nessus
nessus
Fedora 20 : file-5.19-4.fc20 (2014-9712)
2014-08-25 00:00:00
Amazon Linux AMI : file (ALAS-2014-398)
2014-10-12 00:00:00
Amazon Linux AMI : php55 (ALAS-2014-415)
2014-10-12 00:00:00
cvelist
cvelist
CVE-2014-3587
2014-08-23 01:00:00
CVE-2012-1571
2012-07-17 21:00:00
cve
cve
CVE-2014-3587
2014-08-23 01:55:01
CVE-2012-1571
2012-07-17 21:55:01
securityvulns
securityvulns
file utility memory corruption
2014-09-03 00:00:00
[ MDVSA-2014:167 ] file
2014-09-03 00:00:00
[USN-2344-1] PHP vulnerabilities
2014-09-15 00:00:00
ubuntucve
ubuntucve
CVE-2014-3587
2014-08-22 00:00:00
CVE-2012-1571
2012-07-17 00:00:00
nvd
nvd
CVE-2014-3587
2014-08-23 01:55:01
CVE-2012-1571
2012-07-17 21:55:01
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-398)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-415)
2015-09-08 00:00:00
Fedora Update for file FEDORA-2014-9712
2014-08-24 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.19-4.fc20
2014-08-24 02:55:59
[SECURITY] Fedora 20 Update: php-5.5.16-1.fc20
2014-09-02 06:40:37
[SECURITY] Fedora 19 Update: php-5.5.16-1.fc19
2014-09-02 06:47:45
mageia
mageia
Updated php packages fix multiple security vulnerabilities
2014-09-05 13:07:37
Updated file packages fix CVE-2014-3587
2014-08-27 03:04:56
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:19
Denial Of Service
2019-01-15 08:58:13
Denial Of Service (DoS)
2019-05-02 05:04:17
checkpoint_advisories
checkpoint_advisories
PHP Fileinfo cdf_read_property_info Denial of Service (CVE-2014-3587)
2014-10-26 00:00:00
debian
debian
[SECURITY] [DSA 2422-2] file regression fix
2012-05-09 18:23:22
[SECURITY] [DLA 50-1] file security update
2014-09-10 15:52:03
[SECURITY] [DSA 3008-2] php5 regression update
2014-08-21 12:39:59
f5
f5
K16875 : file vulnerability CVE-2012-1571
2015-07-02 00:00:00
SOL16875 - file vulnerability CVE-2012-1571
2015-07-02 00:00:00
gentoo
gentoo
file: Denial of service
2012-09-26 00:00:00
debiancve
debiancve
CVE-2012-1571
2012-07-17 21:55:01
ubuntu
ubuntu
file vulnerability
2014-10-03 00:00:00
PHP vulnerabilities
2014-09-10 00:00:00
file vulnerabilities
2014-02-26 00:00:00
centos
centos
php, php53 security update
2014-09-30 10:27:47
php security update
2014-09-30 10:59:18
file, python security update
2014-10-20 18:08:44
redhat
redhat
(RHSA-2014:1326) Moderate: php53 and php security update
2014-09-30 00:00:00
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
kitploit
kitploit
Versionscan - A PHP Version Scanner For Reporting Possible Vulnerabilities
2019-05-21 21:17:00
osv
osv
file - security update
2014-09-10 00:00:00
php5 - security update
2014-08-21 00:00:00
php5 - security update
2014-09-30 00:00:00
oraclelinux
oraclelinux
php53 and php security update
2014-09-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
php security update
2014-09-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
slackware
slackware
[slackware-security] php
2014-09-04 22:00:56
ibm
ibm
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
suse
suse
Security update for php53 (important)
2016-09-16 21:09:09
Security update for php5 (important)
2016-09-28 15:09:48
Security update for php5 (important)
2016-10-04 17:11:09
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.3%
Related for DEBIANCVE:CVE-2014-3587