RHSA-2015:2155 - Vulnerability-Lookup

RHSA-2015:2155

Vulnerability from csaf_opensuse - Published: 2015-11-19 00:00 - Updated: 2026-09-20 10:55

Summary

security update for file

Severity

Moderate

Notes

Title of the patch: security update for file

Description of the patch: This security update provides a functional equivalent of RHSA-2015:2155. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:2155.

Patchnames: RHSA-2015:2155

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2014-0207

Affected products

Recommended 8 products

Product	Identifier	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64		—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch		—	Vendor Fix

Threats

Impact moderate

CVE-2014-0237

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-0238

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3478

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3479

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3480

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3487

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3538

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3587

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-3710

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-8116

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-8117

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-9652

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact moderate

CVE-2014-9653

Affected products

Recommended 8 products, the same list as for CVE-2014-0207

Threats

Impact low

References

65 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2014-0207/	self
https://www.suse.com/security/cve/CVE-2014-0237/	self
https://www.suse.com/security/cve/CVE-2014-0238/	self
https://www.suse.com/security/cve/CVE-2014-3478/	self
https://www.suse.com/security/cve/CVE-2014-3479/	self
https://www.suse.com/security/cve/CVE-2014-3480/	self
https://www.suse.com/security/cve/CVE-2014-3487/	self
https://www.suse.com/security/cve/CVE-2014-3538/	self
https://www.suse.com/security/cve/CVE-2014-3587/	self
https://www.suse.com/security/cve/CVE-2014-3710/	self
https://www.suse.com/security/cve/CVE-2014-8116/	self
https://www.suse.com/security/cve/CVE-2014-8117/	self
https://www.suse.com/security/cve/CVE-2014-9652/	self
https://www.suse.com/security/cve/CVE-2014-9653/	self
https://www.suse.com/security/cve/CVE-2014-0207	external
https://bugzilla.suse.com/884986	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-0237	external
https://bugzilla.suse.com/880905	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-0238	external
https://bugzilla.suse.com/880904	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3478	external
https://bugzilla.suse.com/884987	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3479	external
https://bugzilla.suse.com/884989	external
https://bugzilla.suse.com/980366	external
https://bugzilla.suse.com/992991	external
https://www.suse.com/security/cve/CVE-2014-3480	external
https://bugzilla.suse.com/884990	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3487	external
https://bugzilla.suse.com/884991	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-3538	external
https://bugzilla.suse.com/935225	external
https://bugzilla.suse.com/987530	external
https://www.suse.com/security/cve/CVE-2014-3587	external
https://bugzilla.suse.com/987530	external
https://bugzilla.suse.com/992991	external
https://bugzilla.suse.com/998845	external
https://www.suse.com/security/cve/CVE-2014-3710	external
https://bugzilla.suse.com/902367	external
https://bugzilla.suse.com/910252	external
https://www.suse.com/security/cve/CVE-2014-8116	external
https://bugzilla.suse.com/910252	external
https://bugzilla.suse.com/910253	external
https://bugzilla.suse.com/917152	external
https://www.suse.com/security/cve/CVE-2014-8117	external
https://bugzilla.suse.com/910252	external
https://bugzilla.suse.com/910253	external
https://bugzilla.suse.com/917152	external
https://www.suse.com/security/cve/CVE-2014-9652	external
https://bugzilla.suse.com/917150	external
https://bugzilla.suse.com/917302	external
https://bugzilla.suse.com/918768	external
https://bugzilla.suse.com/980366	external
https://www.suse.com/security/cve/CVE-2014-9653	external
https://bugzilla.suse.com/917152	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for file",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:2155.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:2155.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:2155",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_2155.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0207 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0237 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0237/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0238 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3478 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3478/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3479 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3480 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3480/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3487 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3487/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3538 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3538/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3587 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3587/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3710 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8116 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8117 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8117/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9652 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9653 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9653/"
      }
    ],
    "title": "security update for file",
    "tracking": {
      "current_release_date": "2026-09-20T10:55:31Z",
      "generator": {
        "date": "2015-11-19T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:2155",
      "initial_release_date": "2015-11-19T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-11-19T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:55:31Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-devel-0:5.11-31.el7.i686",
                "product": {
                  "name": "file-devel-0:5.11-31.el7.i686",
                  "product_id": "file-devel-0:5.11-31.el7.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/file-devel@5.11-31.el7?arch=i686\u0026upstream=file-0:5.11-31.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-libs-0:5.11-31.el7.i686",
                "product": {
                  "name": "file-libs-0:5.11-31.el7.i686",
                  "product_id": "file-libs-0:5.11-31.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/file-libs@5.11-31.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-static-0:5.11-31.el7.i686",
                "product": {
                  "name": "file-static-0:5.11-31.el7.i686",
                  "product_id": "file-static-0:5.11-31.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/file-static@5.11-31.el7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-magic-0:5.11-31.el7.noarch",
                "product": {
                  "name": "python-magic-0:5.11-31.el7.noarch",
                  "product_id": "python-magic-0:5.11-31.el7.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python-magic@5.11-31.el7?arch=noarch\u0026upstream=python-magic-0:5.11-31.el7.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:5.11-31.el7.x86_64",
                "product": {
                  "name": "file-0:5.11-31.el7.x86_64",
                  "product_id": "file-0:5.11-31.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/file@5.11-31.el7?arch=x86_64\u0026upstream=file-0:5.11-31.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-devel-0:5.11-31.el7.x86_64",
                "product": {
                  "name": "file-devel-0:5.11-31.el7.x86_64",
                  "product_id": "file-devel-0:5.11-31.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:file_project:file:5.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/file-devel@5.11-31.el7?arch=x86_64\u0026upstream=file-0:5.11-31.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-libs-0:5.11-31.el7.x86_64",
                "product": {
                  "name": "file-libs-0:5.11-31.el7.x86_64",
                  "product_id": "file-libs-0:5.11-31.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/file-libs@5.11-31.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-static-0:5.11-31.el7.x86_64",
                "product": {
                  "name": "file-static-0:5.11-31.el7.x86_64",
                  "product_id": "file-static-0:5.11-31.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/file-static@5.11-31.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:5.11-31.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64"
        },
        "product_reference": "file-0:5.11-31.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-0:5.11-31.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686"
        },
        "product_reference": "file-devel-0:5.11-31.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-0:5.11-31.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64"
        },
        "product_reference": "file-devel-0:5.11-31.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-libs-0:5.11-31.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686"
        },
        "product_reference": "file-libs-0:5.11-31.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-libs-0:5.11-31.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64"
        },
        "product_reference": "file-libs-0:5.11-31.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-static-0:5.11-31.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686"
        },
        "product_reference": "file-static-0:5.11-31.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-static-0:5.11-31.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64"
        },
        "product_reference": "file-static-0:5.11-31.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-0:5.11-31.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        },
        "product_reference": "python-magic-0:5.11-31.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-0207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0207",
          "url": "https://www.suse.com/security/cve/CVE-2014-0207"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884986 for CVE-2014-0207",
          "url": "https://bugzilla.suse.com/884986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-0207",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-0207",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0207"
    },
    {
      "cve": "CVE-2014-0237",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0237"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0237",
          "url": "https://www.suse.com/security/cve/CVE-2014-0237"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880905 for CVE-2014-0237",
          "url": "https://bugzilla.suse.com/880905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-0237",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0237"
    },
    {
      "cve": "CVE-2014-0238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0238",
          "url": "https://www.suse.com/security/cve/CVE-2014-0238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880904 for CVE-2014-0238",
          "url": "https://bugzilla.suse.com/880904"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-0238",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0238"
    },
    {
      "cve": "CVE-2014-3478",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3478"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3478",
          "url": "https://www.suse.com/security/cve/CVE-2014-3478"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884987 for CVE-2014-3478",
          "url": "https://bugzilla.suse.com/884987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-3478",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-3478",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3478"
    },
    {
      "cve": "CVE-2014-3479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3479",
          "url": "https://www.suse.com/security/cve/CVE-2014-3479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884989 for CVE-2014-3479",
          "url": "https://bugzilla.suse.com/884989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-3479",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-3479",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3479"
    },
    {
      "cve": "CVE-2014-3480",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3480"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3480",
          "url": "https://www.suse.com/security/cve/CVE-2014-3480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884990 for CVE-2014-3480",
          "url": "https://bugzilla.suse.com/884990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-3480",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3480"
    },
    {
      "cve": "CVE-2014-3487",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3487"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3487",
          "url": "https://www.suse.com/security/cve/CVE-2014-3487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 884991 for CVE-2014-3487",
          "url": "https://bugzilla.suse.com/884991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-3487",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3487"
    },
    {
      "cve": "CVE-2014-3538",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3538"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3538",
          "url": "https://www.suse.com/security/cve/CVE-2014-3538"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935225 for CVE-2014-3538",
          "url": "https://bugzilla.suse.com/935225"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987530 for CVE-2014-3538",
          "url": "https://bugzilla.suse.com/987530"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3538"
    },
    {
      "cve": "CVE-2014-3587",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3587"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3587",
          "url": "https://www.suse.com/security/cve/CVE-2014-3587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987530 for CVE-2014-3587",
          "url": "https://bugzilla.suse.com/987530"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-3587",
          "url": "https://bugzilla.suse.com/992991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 998845 for CVE-2014-3587",
          "url": "https://bugzilla.suse.com/998845"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3587"
    },
    {
      "cve": "CVE-2014-3710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3710",
          "url": "https://www.suse.com/security/cve/CVE-2014-3710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902367 for CVE-2014-3710",
          "url": "https://bugzilla.suse.com/902367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910252 for CVE-2014-3710",
          "url": "https://bugzilla.suse.com/910252"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3710"
    },
    {
      "cve": "CVE-2014-8116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8116",
          "url": "https://www.suse.com/security/cve/CVE-2014-8116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910252 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/910252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910253 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/910253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8116"
    },
    {
      "cve": "CVE-2014-8117",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8117"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8117",
          "url": "https://www.suse.com/security/cve/CVE-2014-8117"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910252 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/910252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910253 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/910253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8117"
    },
    {
      "cve": "CVE-2014-9652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9652",
          "url": "https://www.suse.com/security/cve/CVE-2014-9652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917150 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917150"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917302 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 918768 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/918768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9652"
    },
    {
      "cve": "CVE-2014-9653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
          "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
          "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9653",
          "url": "https://www.suse.com/security/cve/CVE-2014-9653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-9653",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:file-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-devel-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-libs-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.i686",
            "SUSE Liberty Linux 7:file-static-0:5.11-31.el7.x86_64",
            "SUSE Liberty Linux 7:python-magic-0:5.11-31.el7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-9653"
    }
  ]
}

CVE-2014-0207 (GCVE-0-2014-0207)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:29

Summary

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:29 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root Scorecard

References

19 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1091842	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68243	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
https://github.com/file/file/commit/6d209c1c48945…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67326	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.204Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68243",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68243"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67326"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-0207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:29:01.775646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:29:06.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091842"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68243",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68243"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67326"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0207",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:29:06.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-0237 (GCVE-0-2014-0237)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
https://github.com/file/file/commit/b8acc83781d5a…	x_refsource_CONFIRM
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/67759	vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67328	x_refsource_CONFIRM

Date Public

2014-05-29 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "67759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67759"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67328"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "67759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67759"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67328"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0237",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/b8acc83781d5a24cc5101e525d15efe0482c280d"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "67759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67759"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67328",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67328"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0237",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0238 (GCVE-0-2014-0238)

Vulnerability from cvelistv5 – Published: 2014-06-01 01:00 – Updated: 2024-08-06 09:05

Summary

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
http://secunia.com/advisories/59329	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67327	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://github.com/file/file/commit/f97486ef5dc3e…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/67765	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://secunia.com/advisories/60998	third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT

Date Public

2014-05-29 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:39.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "59329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59329"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "67765",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67765"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "60998",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60998"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "59329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59329"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "67765",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67765"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "60998",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60998"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "59329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59329"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67327",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67327"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21683486"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "67765",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67765"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "60998",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60998"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6443",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6443"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0238",
    "datePublished": "2014-06-01T01:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:39.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3478 (GCVE-0-2014-3478)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:26

Summary

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:26 UTC

CWE

n/a
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

redhat redhat root Scorecard

References

19 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
https://github.com/file/file/commit/27a14bc7ba285…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68239	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67410	x_refsource_CONFIRM
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08"
          },
          {
            "name": "68239",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68239"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67410"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3478",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:26:48.397424Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:26:53.242Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08"
        },
        {
          "name": "68239",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68239"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67410"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3478",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:26:53.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-3479 (GCVE-0-2014-3479)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
https://github.com/file/file/commit/36fadd29849b8…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67411	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68241	vdb-entryx_refsource_BID
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67411"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "68241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68241"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67411"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "68241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68241"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3479",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.212Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3480 (GCVE-0-2014-3480)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2025-12-04 20:25

Summary

The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-04 20:25 UTC

CWE

n/a
CWE-20 - Improper Input Validation

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.securityfocus.com/bid/68238	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
https://github.com/file/file/commit/40bade80cbe2a…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67412	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "68238",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68238"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2014-3480",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-04T20:25:26.430563Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-04T20:25:29.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "68238",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68238"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3480",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2025-12-04T20:25:29.415Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2014-3487 (GCVE-0-2014-3487)

Vulnerability from cvelistv5 – Published: 2014-07-09 10:00 – Updated: 2024-08-06 10:43

Summary

The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

18 references

URL	Tags
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=141017844705317&w=2	vendor-advisoryx_refsource_HP
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2974	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59794	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://support.apple.com/kb/HT6443	x_refsource_CONFIRM
https://github.com/file/file/commit/93e063ee374b6…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=67413	x_refsource_CONFIRM
http://secunia.com/advisories/59831	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68120	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "HPSBUX03102",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "DSA-2974",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2974"
          },
          {
            "name": "59794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59794"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6443"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "SSRT101681",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67413"
          },
          {
            "name": "59831",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59831"
          },
          {
            "name": "68120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68120"
          },
          {
            "name": "openSUSE-SU-2014:1236",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "HPSBUX03102",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "DSA-2974",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2974"
        },
        {
          "name": "59794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59794"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6443"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "SSRT101681",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141017844705317\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67413"
        },
        {
          "name": "59831",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59831"
        },
        {
          "name": "68120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68120"
        },
        {
          "name": "openSUSE-SU-2014:1236",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3487",
    "datePublished": "2014-07-09T10:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3538 (GCVE-0-2014-3538)

Vulnerability from cvelistv5 – Published: 2014-07-03 14:00 – Updated: 2024-08-06 10:50

Summary

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

22 references

URL	Tags
https://github.com/file/file/commit/74cafd7de9ec9…	x_refsource_CONFIRM
https://github.com/file/file/commit/71a8b6c0d758a…	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=1098222	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/68348	vdb-entryx_refsource_BID
https://github.com/file/file/commit/4a284c89d6ef1…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2014/06/30/7	mailing-listx_refsource_MLIST
http://mx.gw.com/pipermail/file/2014/001553.html	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.debian.org/security/2014/dsa-3008	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://github.com/file/file/commit/69a5a43b3b71f…	x_refsource_CONFIRM
http://secunia.com/advisories/60696	third-party-advisoryx_refsource_SECUNIA
https://github.com/file/file/commit/758e066df72fb…	x_refsource_CONFIRM

Date Public

2014-06-12 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:16.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "name": "68348",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/68348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
          },
          {
            "name": "[file] 20140612 file-5.19 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "DSA-3008",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3008"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
          },
          {
            "name": "60696",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60696"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "name": "68348",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/68348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
        },
        {
          "name": "[file] 20140612 file-5.19 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "DSA-3008",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3008"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
        },
        {
          "name": "60696",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60696"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3538",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7345."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3"
            },
            {
              "name": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098222"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "68348",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/68348"
            },
            {
              "name": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "[oss-security] 20140630 changing CVE ID for RH Bugzilla 1098222 (from CVE-2014-0235)",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2014/06/30/7"
            },
            {
              "name": "[file] 20140612 file-5.19 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2014/001553.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "DSA-3008",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3008"
            },
            {
              "name": "RHSA-2014:1327",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/69a5a43b3b71f53b0577f41264a073f495799610"
            },
            {
              "name": "60696",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60696"
            },
            {
              "name": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3538",
    "datePublished": "2014-07-03T14:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:16.893Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3587 (GCVE-0-2014-3587)

Vulnerability from cvelistv5 – Published: 2014-08-23 01:00 – Updated: 2024-08-06 10:50

Summary

Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

23 references

URL	Tags
https://github.com/file/file/commit/0641e56be1af0…	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2369-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2014/dsa-3021	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/60609	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2344-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisoryx_refsource_REDHAT
https://security-tracker.debian.org/tracker/CVE-2…	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1326.html	vendor-advisoryx_refsource_REDHAT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.debian.org/security/2014/dsa-3008	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/69325	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://github.com/php/php-src/commit/7ba1409a1ae…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=67716	x_refsource_CONFIRM
http://secunia.com/advisories/60696	third-party-advisoryx_refsource_SECUNIA

Date Public

2014-08-21 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.834Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "USN-2369-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2369-1"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "DSA-3021",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3021"
          },
          {
            "name": "60609",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60609"
          },
          {
            "name": "USN-2344-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2344-1"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2014-3587"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2014:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "DSA-3008",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3008"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "69325",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/69325"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=67716"
          },
          {
            "name": "60696",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60696"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-08-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "USN-2369-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2369-1"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "DSA-3021",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3021"
        },
        {
          "name": "60609",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60609"
        },
        {
          "name": "USN-2344-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2344-1"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2014-3587"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2014:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "DSA-3008",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3008"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "69325",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/69325"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=67716"
        },
        {
          "name": "60696",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60696"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3587",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "USN-2369-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2369-1"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "DSA-3021",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3021"
            },
            {
              "name": "60609",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60609"
            },
            {
              "name": "USN-2344-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2344-1"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "https://security-tracker.debian.org/tracker/CVE-2014-3587",
              "refsource": "CONFIRM",
              "url": "https://security-tracker.debian.org/tracker/CVE-2014-3587"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2014:1326",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "DSA-3008",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3008"
            },
            {
              "name": "RHSA-2014:1327",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "69325",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/69325"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947",
              "refsource": "CONFIRM",
              "url": "https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=67716",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=67716"
            },
            {
              "name": "60696",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60696"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3587",
    "datePublished": "2014-08-23T01:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.834Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3710 (GCVE-0-2014-3710)

Vulnerability from cvelistv5 – Published: 2014-11-05 11:00 – Updated: 2024-08-06 10:50

Summary

The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

Severity

No CVSS data available.

CWE

n/a

Assigner

redhat redhat root Scorecard

References

33 references

URL	Tags
https://bugs.php.net/bug.php?id=68283	x_refsource_CONFIRM
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=…	x_refsource_CONFIRM
http://secunia.com/advisories/62347	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1767.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2391-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/file/file/commit/39c7ac1106be8…	x_refsource_CONFIRM
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://secunia.com/advisories/61982	third-party-advisoryx_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/61763	third-party-advisoryx_refsource_SECUNIA
http://linux.oracle.com/errata/ELSA-2014-1767.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
https://www.freebsd.org/security/advisories/FreeB…	vendor-advisoryx_refsource_FREEBSD
http://linux.oracle.com/errata/ELSA-2014-1768.html	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-3072	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2494-1	vendor-advisoryx_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/61970	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id/1031344	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-1…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2014-1768.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-42	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/60699	third-party-advisoryx_refsource_SECUNIA
https://security.gentoo.org/glsa/201503-03	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/70807	vdb-entryx_refsource_BID
http://secunia.com/advisories/60630	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1155071	x_refsource_CONFIRM
http://secunia.com/advisories/62559	third-party-advisoryx_refsource_SECUNIA

Date Public

2014-10-21 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.979Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=68283"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d"
          },
          {
            "name": "62347",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62347"
          },
          {
            "name": "RHSA-2014:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1767.html"
          },
          {
            "name": "USN-2391-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2391-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "61982",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61982"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "61763",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-1767.html"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "FreeBSD-SA-14:28",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-1768.html"
          },
          {
            "name": "DSA-3072",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3072"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "name": "USN-2494-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2494-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "61970",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61970"
          },
          {
            "name": "1031344",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031344"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "name": "openSUSE-SU-2014:1516",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html"
          },
          {
            "name": "RHSA-2014:1768",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1768.html"
          },
          {
            "name": "GLSA-201701-42",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-42"
          },
          {
            "name": "60699",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60699"
          },
          {
            "name": "GLSA-201503-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-03"
          },
          {
            "name": "70807",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70807"
          },
          {
            "name": "60630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60630"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155071"
          },
          {
            "name": "62559",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62559"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=68283"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1803228597e82218a8c105e67975bc50e6f5bf0d"
        },
        {
          "name": "62347",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62347"
        },
        {
          "name": "RHSA-2014:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1767.html"
        },
        {
          "name": "USN-2391-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2391-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "61982",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61982"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "61763",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-1767.html"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "FreeBSD-SA-14:28",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-1768.html"
        },
        {
          "name": "DSA-3072",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3072"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "name": "USN-2494-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2494-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "61970",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61970"
        },
        {
          "name": "1031344",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031344"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "name": "openSUSE-SU-2014:1516",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html"
        },
        {
          "name": "RHSA-2014:1768",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1768.html"
        },
        {
          "name": "GLSA-201701-42",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-42"
        },
        {
          "name": "60699",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60699"
        },
        {
          "name": "GLSA-201503-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-03"
        },
        {
          "name": "70807",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70807"
        },
        {
          "name": "60630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60630"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155071"
        },
        {
          "name": "62559",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62559"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3710",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=68283",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=68283"
            },
            {
              "name": "http://git.php.net/?p=php-src.git;a=commit;h=1803228597e82218a8c105e67975bc50e6f5bf0d",
              "refsource": "CONFIRM",
              "url": "http://git.php.net/?p=php-src.git;a=commit;h=1803228597e82218a8c105e67975bc50e6f5bf0d"
            },
            {
              "name": "62347",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62347"
            },
            {
              "name": "RHSA-2014:1767",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1767.html"
            },
            {
              "name": "USN-2391-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2391-1"
            },
            {
              "name": "https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/39c7ac1106be844a5296d3eb5971946cc09ffda0"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "61982",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61982"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "61763",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61763"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-1767.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-1767.html"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "FreeBSD-SA-14:28",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-1768.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-1768.html"
            },
            {
              "name": "DSA-3072",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3072"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "USN-2494-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2494-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "61970",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61970"
            },
            {
              "name": "1031344",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031344"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "openSUSE-SU-2014:1516",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html"
            },
            {
              "name": "RHSA-2014:1768",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1768.html"
            },
            {
              "name": "GLSA-201701-42",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-42"
            },
            {
              "name": "60699",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60699"
            },
            {
              "name": "GLSA-201503-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-03"
            },
            {
              "name": "70807",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/70807"
            },
            {
              "name": "60630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60630"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1155071",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1155071"
            },
            {
              "name": "62559",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62559"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3710",
    "datePublished": "2014-11-05T11:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.