CVE-2019-8907

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html
• bugs.astron.com/view.php · Exploit
• lists.debian.org/debian-lts-announce/2019/02/msg00044.html · Third Party Advisory
• usn.ubuntu.com/3911-1 · Third Party Advisory

file のその他の脆弱性

• CVE-2022-48554中 5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
• CVE-2019-18218高 7.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o…
• CVE-2019-8906中 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
• CVE-2019-8905中 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerabilit…
• CVE-2019-8904高 8.8do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.