CVE-2019-8907

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.46%

Published

Feb 18, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

Weaknesses (CWE)

CWE-787

Affected Products (6)

file_project · filevulnerable

debian · debian_linuxvulnerable

opensuse · leapvulnerable

canonical · ubuntu_linuxvulnerable

References (10)

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html

https://bugs.astron.com/view.php?id=65

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html

Third Party Advisory

https://usn.ubuntu.com/3911-1/

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html

https://bugs.astron.com/view.php?id=65

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html

Third Party Advisory

https://usn.ubuntu.com/3911-1/

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs