Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:2512
HistoryApr 30, 2024 - 6:15 a.m.

(RHSA-2024:2512) Low: file security update

2024-04-3006:15:54
access.redhat.com
15
file command
security update
stack-based buffer over-read
cve-2022-48554
red hat enterprise linux 9.4 release notes
elf binary files
rpm packages
graphics formats

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.4%

JSON

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

  • file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9i686file-libs< 5.39-16.el9file-libs-5.39-16.el9.i686.rpm
RedHat9s390xfile-debuginfo< 5.39-16.el9file-debuginfo-5.39-16.el9.s390x.rpm
RedHat9s390xfile-libs-debuginfo< 5.39-16.el9file-libs-debuginfo-5.39-16.el9.s390x.rpm
RedHat9i686file-libs-debuginfo< 5.39-16.el9file-libs-debuginfo-5.39-16.el9.i686.rpm
RedHat9aarch64file-debugsource< 5.39-16.el9file-debugsource-5.39-16.el9.aarch64.rpm
RedHat9ppc64lefile-debuginfo< 5.39-16.el9file-debuginfo-5.39-16.el9.ppc64le.rpm
RedHat9s390xfile-devel< 5.39-16.el9file-devel-5.39-16.el9.s390x.rpm
RedHat9x86_64file-libs< 5.39-16.el9file-libs-5.39-16.el9.x86_64.rpm
RedHat9ppc64lefile-debugsource< 5.39-16.el9file-debugsource-5.39-16.el9.ppc64le.rpm
RedHat9aarch64file-debuginfo< 5.39-16.el9file-debuginfo-5.39-16.el9.aarch64.rpm
Rows per page:
1-10 of 301

Related

osv 5
ubuntu 1
nessus 20
openvas 12
mageia 1
cve 1
debiancve 1
alpinelinux 1
almalinux 1
rocky 1
ubuntucve 1
debian 1
prion 1
oraclelinux 1
gentoo 1
redhatcve 1
nvd 1
cloudfoundry 1
veracode 2
cvelist 1
ibm 7
photon 1
redhat 20
apple 4
hp 1
osv
osv
file - security update
2023-09-04 00:00:00
CVE-2022-48554
2023-08-22 19:16:31
file vulnerability
2023-09-12 16:23:47
ubuntu
ubuntu
file vulnerability
2023-09-12 00:00:00
nessus
nessus
EulerOS 2.0 SP11 : file (EulerOS-SA-2023-3004)
2024-01-16 00:00:00
EulerOS Virtualization 2.10.0 : file (EulerOS-SA-2023-3467)
2024-01-16 00:00:00
RHEL 9 : file (RHSA-2024:2512)
2024-04-30 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for file (EulerOS-SA-2023-3467)
2023-12-22 00:00:00
Huawei EulerOS: Security Advisory for file (EulerOS-SA-2023-3027)
2023-10-31 00:00:00
Ubuntu: Security Advisory (USN-6359-1)
2023-09-13 00:00:00
mageia
mageia
Updated file packages fix security vulnerability
2023-09-25 01:16:18
cve
cve
CVE-2022-48554
2023-08-22 19:16:31
debiancve
debiancve
CVE-2022-48554
2023-08-22 19:16:31
alpinelinux
alpinelinux
CVE-2022-48554
2023-08-22 19:16:31
almalinux
almalinux
Low: file security update
2024-04-30 00:00:00
rocky
rocky
file security update
2024-05-10 14:32:36
ubuntucve
ubuntucve
CVE-2022-48554
2023-08-22 00:00:00
debian
debian
[SECURITY] [DSA 5489-1] file security update
2023-09-04 19:48:39
prion
prion
Stack overflow
2023-08-22 19:16:00
oraclelinux
oraclelinux
file security update
2024-05-02 00:00:00
gentoo
gentoo
file: Stack Buffer Overread
2024-09-22 00:00:00
redhatcve
redhatcve
CVE-2022-48554
2023-08-29 14:16:04
nvd
nvd
CVE-2022-48554
2023-08-22 19:16:31
cloudfoundry
cloudfoundry
USN-6359-1: file vulnerability | Cloud Foundry
2023-10-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-30 22:30:08
Buffer Overflow
2023-10-11 03:55:11
cvelist
cvelist
CVE-2022-48554
2023-08-22 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak.
2024-01-12 18:08:01
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
2024-06-03 10:05:46
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.1.1
2024-09-30 13:04:09
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0584
2024-03-27 00:00:00
redhat
redhat
(RHSA-2024:2933) Important: logging for Red Hat OpenShift security update
2024-05-23 06:15:17
(RHSA-2024:2901) Low: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update
2024-05-23 14:07:36
(RHSA-2024:5745) Moderate: Red Hat OpenShift for Windows Containers 10.15.3 product release
2024-08-22 04:55:33
apple
apple
About the security content of watchOS 10.4
2024-03-07 00:00:00
About the security content of tvOS 17.4
2024-03-07 00:00:00
About the security content of iOS 17.4 and iPadOS 17.4
2024-03-05 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.4%

JSON
Related for RHSA-2024:2512
osv5ubuntu1nessus20openvas12mageia1cve1debiancve1alpinelinux1almalinux1rocky1ubuntucve1debian1prion1oraclelinux1gentoo1redhatcve1nvd1cloudfoundry1veracode2cvelist1ibm7photon1redhat20apple4hp1