Red Hat Security AdvisoryRHSA-2020:2768
file security update
Released 2020-06-30 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) file-5.11-33.el7_4.1, file-libs-5.11-33.el7_4.1, python-magic-5.11-33.el7_4.1
- Red Hat Enterprise Linux Server E4S (v. 7.4) file-5.11-33.el7_4.1, file-libs-5.11-33.el7_4.1, python-magic-5.11-33.el7_4.1
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) file-devel-5.11-33.el7_4.1, file-static-5.11-33.el7_4.1
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) file-devel-5.11-33.el7_4.1, file-static-5.11-33.el7_4.1
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) file-devel-5.11-33.el7_4.1, file-static-5.11-33.el7_4.1
- Red Hat Enterprise Linux Server TUS (v. 7.4) file-5.11-33.el7_4.1, file-libs-5.11-33.el7_4.1, python-magic-5.11-33.el7_4.1
Fixes 1 record
Priority LOW 35
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0341 · Published 2018-06-11 · Partial fix CWE-125
