Lucene search

K
freebsdFreeBSD9575259A-92D5-11E4-BCE6-D050992ECDE8
HistoryDec 16, 2014 - 12:00 a.m.

file -- multiple vulnerabilities

2014-12-1600:00:00
vuxml.freebsd.org
22

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.063 Low

EPSS

Percentile

93.6%

RedHat reports:

Thomas Jarosch of Intra2net AG reported a number of
denial of service issues (resource consumption) in
the ELF parser used by file(1). These issues were
fixed in the 5.21 release of file(1), but by mistake
are missing from the changelog.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfile< 5.21UNKNOWN
FreeBSDanynoarchfreebsd= 8.4UNKNOWN
FreeBSDanynoarchfreebsd< 8.4_20UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.063 Low

EPSS

Percentile

93.6%