Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3710HistoryNov 05, 2014 - 11:55 a.m.
CVE-2014-3710
2014-11-0511:55:06
Debian Security Bug Tracker
security-tracker.debian.org
17
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.063 Low
EPSS
Percentile
93.6%
The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | file | < 1:5.20-2 | file_1:5.20-2_all.deb |
| Debian | 11 | all | file | < 1:5.20-2 | file_1:5.20-2_all.deb |
| Debian | 999 | all | file | < 1:5.20-2 | file_1:5.20-2_all.deb |
| Debian | 13 | all | file | < 1:5.20-2 | file_1:5.20-2_all.deb |
Related
nessus
nessus
openSUSE Security Update : file (openSUSE-SU-2014:1516-1)
2014-11-28 00:00:00
Mandriva Linux Security Advisory : file (MDVSA-2014:236)
2014-11-30 00:00:00
PHP 5.6.x < 5.6.3 'donote' DoS
2014-11-14 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3072-1)
2014-11-10 00:00:00
Debian Security Advisory DSA 3072-1 (file - security update)
2014-11-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1555-1)
2021-04-19 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2014-11-12 12:56:47
Updated [package] package fix CVE-2014-3710
2014-10-31 18:53:38
nvd
nvd
CVE-2014-3710
2014-11-05 11:55:06
f5
f5
K15898 : PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
SOL15898 - PHP vulnerability CVE-2014-3710
2014-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: file-5.19-7.fc21
2014-11-10 06:44:48
[SECURITY] Fedora 20 Update: file-5.19-7.fc20
2014-10-29 11:03:54
amazon
amazon
cvelist
cvelist
CVE-2014-3710
2014-11-05 11:00:00
prion
prion
Out-of-bounds
2014-11-05 11:55:00
debian
debian
[SECURITY] [DLA 86-1] file security update
2014-11-12 16:17:29
[SECURITY] [DSA 3074-1] php5 security update
2014-11-18 21:10:45
[SECURITY] [DSA 3072-1] file security update
2014-11-12 09:19:45
ubuntucve
ubuntucve
CVE-2014-3710
2014-10-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:21
Denial Of Service (DoS)
2019-05-02 05:04:17
Denial Of Service (DoS)
2019-05-02 05:04:17
osv
osv
file - security update
2014-11-11 00:00:00
php5 - security update
2014-11-18 00:00:00
php5 - security update
2014-11-25 00:00:00
cve
cve
CVE-2014-3710
2014-11-05 11:55:06
archlinux
archlinux
php: denial of service
2014-11-13 00:00:00
file: denial of service through out-of-bounds read
2014-11-12 00:00:00
securityvulns
securityvulns
[slackware-security] php (SSA:2014-356-02)
2014-12-23 00:00:00
PHP/fileinfo/file DoS
2014-06-14 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:28.file
2014-12-10 00:00:00
slackware
slackware
[slackware-security] php
2014-12-23 05:38:55
ubuntu
ubuntu
file vulnerabilities
2015-02-04 00:00:00
php5 vulnerabilities
2014-10-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:28.file
2014-12-10 00:00:00
freebsd
freebsd
file -- multiple vulnerabilities
2014-12-16 00:00:00
oraclelinux
oraclelinux
php security update
2014-10-30 00:00:00
php53 security update
2014-10-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
centos
centos
php security update
2014-10-31 13:14:51
php53 security update
2014-10-31 14:37:09
file, python security update
2016-05-16 10:13:44
redhat
redhat
(RHSA-2014:1768) Important: php53 security update
2014-10-30 00:00:00
(RHSA-2014:1767) Important: php security update
2014-10-30 00:00:00
(RHSA-2016:0760) Moderate: file security, bug fix, and enhancement update
2016-05-10 06:42:18
gentoo
gentoo
file: Multiple vulnerabilities
2017-01-17 00:00:00
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.063 Low
EPSS
Percentile
93.6%
Related for DEBIANCVE:CVE-2014-3710