CVE-2019-8905

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html · Mailing List
• securityfocus.com/bid/107137 · Third Party Advisory
• bugs.astron.com/view.php · Exploit
• lists.debian.org/debian-lts-announce/2019/02/msg00044.html · Mailing List
• usn.ubuntu.com/3911-1 · Third Party Advisory

file의 다른 취약점

• CVE-2022-48554보통 5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
• CVE-2019-18218높음 7.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o…
• CVE-2019-8907높음 8.8do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application …
• CVE-2019-8906보통 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
• CVE-2019-8904높음 8.8do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.