CVE-2019-8906

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html · Mailing List
• bugs.astron.com/view.php · Exploit
• file/file commit 2858eaf · Patch
• support.apple.com/kb/HT209599 · Third Party Advisory
• support.apple.com/kb/HT209600 · Third Party Advisory
• support.apple.com/kb/HT209601 · Third Party Advisory
• support.apple.com/kb/HT209602 · Third Party Advisory
• usn.ubuntu.com/3911-1 · Third Party Advisory

file 的其他漏洞

• CVE-2022-48554中危 5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
• CVE-2019-18218高危 7.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o…
• CVE-2019-8907高危 8.8do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application …
• CVE-2019-8905中危 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerabilit…
• CVE-2019-8904高危 8.8do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.