CVE-2014-9620
NONE EPSS 90.7%
Published Jan 21, 201511y ago · Modified Jun 17, 20262w ago
Published Jan 21, 2015 11y ago
Last Modified Jun 17, 2026 2w ago
Description
The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
Threat Intelligence
EPSS Exploit Probability
90.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-399
Affected Products 14
| Vendor | Product | Version | Range |
|---|---|---|---|
| file_project | file | 5.08 | any |
| file_project | file | 5.09 | any |
| file_project | file | 5.10 | any |
| file_project | file | 5.11 | any |
| file_project | file | 5.12 | any |
| file_project | file | 5.13 | any |
| file_project | file | 5.14 | any |
| file_project | file | 5.15 | any |
| file_project | file | 5.16 | any |
| file_project | file | 5.17 | any |
| file_project | file | 5.18 | any |
| file_project | file | 5.19 | any |
| file_project | file | 5.20 | any |
| file_project | file | 5.21 | any |
References 11
- advisories.mageia.org http://advisories.mageia.org/MGASA-2015-0040.html
- mx.gw.com http://mx.gw.com/pipermail/file/2014/001653.html
- mx.gw.com http://mx.gw.com/pipermail/file/2015/001660.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0760.html
- debian.org http://www.debian.org/security/2015/dsa-3121
- openwall.com http://www.openwall.com/lists/oss-security/2015/01/17/9
- oracle.com http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- securityfocus.com http://www.securityfocus.com/bid/71715
- github.com https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4
- security.gentoo.org https://security.gentoo.org/glsa/201503-08
- usn.ubuntu.com https://usn.ubuntu.com/3686-1/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.