USN-2494-1
Dashboard / Vulnerabilities / USN-2494-1
USN-2494-1
Summary: file vulnerabilities
Details: Francisco Alonso discovered that file incorrectly handled certain ELF files. An attacker could use this issue to cause file to crash, resulting in a denial of service. (CVE-2014-3710) Thomas Jarosch discovered that file incorrectly handled certain ELF files. An attacker could use this issue to cause file to hang or crash, resulting in a denial of service. (CVE-2014-8116) Thomas Jarosch discovered that file incorrectly limited recursion. An attacker could use this issue to cause file to hang or crash, resulting in a denial of service. (CVE-2014-8117)
References: https://ubuntu.com/security/notices/USN-2494-1, https://ubuntu.com/security/CVE-2014-3710, https://ubuntu.com/security/CVE-2014-8116, https://ubuntu.com/security/CVE-2014-8117
Affected packages
Package
Name: file
Purl: pkg:deb/ubuntu/file@1:5.14-2ubuntu3.3?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
