Lucene search
Veracode Vulnerability DatabaseVERACODE:11184HistoryJan 15, 2019 - 8:58 a.m.
Denial Of Service
2019-01-1508:58:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.009 Low
EPSS
Percentile
83.2%
PHP is susceptible to denial of service. The vulnerability exists because of the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. An attacker can inject malicious CDF file to crash a PHP.
References
mx.gw.com/pipermail/file/2012/000914.html
www.debian.org/security/2012/dsa-2422
www.mandriva.com/security/advisories?name=MDVSA-2012:035
www.ubuntu.com/usn/USN-2123-1
access.redhat.com/security/updates/classification/#moderate
github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295
github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b
rhn.redhat.com/errata/RHSA-2014-1012.html
Related
nessus
nessus
GLSA-201209-14 : file: Denial of Service
2012-09-27 00:00:00
openSUSE Security Update : file (openSUSE-SU-2012:0488-1)
2014-06-13 00:00:00
F5 Networks BIG-IP : file vulnerability (SOL16875)
2016-01-22 00:00:00
debian
debian
[SECURITY] [DSA 2422-2] file regression fix
2012-05-09 18:23:22
f5
f5
K16875 : file vulnerability CVE-2012-1571
2015-07-02 00:00:00
SOL16875 - file vulnerability CVE-2012-1571
2015-07-02 00:00:00
gentoo
gentoo
file: Denial of service
2012-09-26 00:00:00
openvas
openvas
Debian Security Advisory DSA 2422-1 (file)
2012-03-12 00:00:00
Mandriva Update for file MDVSA-2012:035 (file)
2012-08-03 00:00:00
Mandriva Update for file MDVSA-2012:035 (file)
2012-08-03 00:00:00
prion
prion
Out-of-bounds
2012-07-17 21:55:00
Integer overflow
2014-08-23 01:55:00
debiancve
debiancve
CVE-2012-1571
2012-07-17 21:55:01
CVE-2014-3587
2014-08-23 01:55:01
cvelist
cvelist
CVE-2012-1571
2012-07-17 21:00:00
CVE-2014-3587
2014-08-23 01:00:00
ubuntucve
ubuntucve
CVE-2012-1571
2012-07-17 00:00:00
CVE-2014-3587
2014-08-22 00:00:00
nvd
nvd
CVE-2012-1571
2012-07-17 21:55:01
CVE-2014-3587
2014-08-23 01:55:01
cve
cve
CVE-2012-1571
2012-07-17 21:55:01
CVE-2014-3587
2014-08-23 01:55:01
amazon
amazon
Medium: file
2014-09-03 14:38:00
Medium: php55
2014-09-18 21:03:00
ubuntu
ubuntu
file vulnerabilities
2014-02-26 00:00:00
securityvulns
securityvulns
file utility memory corruption
2014-09-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.19-4.fc20
2014-08-24 02:55:59
[SECURITY] Fedora 20 Update: php-5.5.16-1.fc20
2014-09-02 06:40:37
[SECURITY] Fedora 19 Update: php-5.5.16-1.fc19
2014-09-02 06:47:45
mageia
mageia
Updated php packages fix multiple security vulnerabilities
2014-09-05 13:07:37
centos
centos
php, php53 security update
2014-09-30 10:27:47
file, python security update
2014-10-20 18:08:44
php security update
2014-09-30 10:59:18
redhat
redhat
(RHSA-2014:1326) Moderate: php53 and php security update
2014-09-30 00:00:00
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
oraclelinux
oraclelinux
php53 and php security update
2014-09-30 00:00:00
file security and bug fix update
2014-10-15 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45