CVE-2019-8906

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html · Mailing List
• bugs.astron.com/view.php · Exploit
• file/file commit 2858eaf · Patch
• support.apple.com/kb/HT209599 · Third Party Advisory
• support.apple.com/kb/HT209600 · Third Party Advisory
• support.apple.com/kb/HT209601 · Third Party Advisory
• support.apple.com/kb/HT209602 · Third Party Advisory
• usn.ubuntu.com/3911-1 · Third Party Advisory

file のその他の脆弱性

• CVE-2022-48554中 5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
• CVE-2019-18218高 7.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o…
• CVE-2019-8907高 8.8do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application …
• CVE-2019-8905中 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerabilit…
• CVE-2019-8904高 8.8do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.