| Package | Affected versions | Patched versions |
|---|---|---|
| file | ≤ 5.37 | |
| active iq unified manager | ≥ 7.3 |
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free