Read the docs
TI-2012-01363 Aliases CVE-2012-1571GHSA-xv4r-r9fj-hh6h

file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash)…

Priority LOW 36CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-125 and the CVSS impact.

Summary

file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.04117 90th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:christos_zoulas:file:*:*:*:*:*:*:*:*up to 5.10VulnerableChristos Zoulas
cpe:2.3:a:tim_robbins:libmagic:*:*:*:*:*:*:*:*all versionsVulnerableTim Robbins
  • cpe:2.3:a:christos_zoulas:file:*:*:*:*:*:*:*:* Versions up to 5.10 Vulnerable ·Christos Zoulas
  • cpe:2.3:a:tim_robbins:libmagic:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Tim Robbins

Remediation

Red Hat 2 advisories

  • RHSA-2014:1606 Released 2014-10-13 · Red Hat rating Moderate
    file security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) file-5.04-21.el6, file-libs-5.04-21.el6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) file-devel-5.04-21.el6, file-static-5.04-21.el6, python-magic-5.04-21.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) file-5.04-21.el6, file-libs-5.04-21.el6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) file-devel-5.04-21.el6, file-static-5.04-21.el6, python-magic-5.04-21.el6
    • Red Hat Enterprise Linux Server (v. 6) file-5.04-21.el6, file-devel-5.04-21.el6, file-devel-5.04-21.el6.ppc +3
    • Red Hat Enterprise Linux Server Optional (v. 6) file-static-5.04-21.el6
    • Red Hat Enterprise Linux Workstation (v. 6) file-5.04-21.el6, file-devel-5.04-21.el6, file-libs-5.04-21.el6 +1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) file-static-5.04-21.el6
  • RHSA-2014:1012 Released 2014-08-06 · Red Hat rating Moderate
    php53 and php security update
    • Red Hat Enterprise Linux (v. 5 server) php53-5.3.3-23.el5_10, php53-5.3.3-23.el5_10.i386, php53-5.3.3-23.el5_10.ia64 +47
    • Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1 +24
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php53-5.3.3-23.el5_10, php53-5.3.3-23.el5_10.i386, php53-bcmath-5.3.3-23.el5_10 +39
    • Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +22
    • Red Hat Enterprise Linux Server (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1 +9
    • Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +13
    • Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-27.el6_5.1, php-cli-5.3.3-27.el6_5.1, php-common-5.3.3-27.el6_5.1 +9
    • Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-27.el6_5.1, php-bcmath-5.3.3-27.el6_5.1, php-dba-5.3.3-27.el6_5.1 +13

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2014:1012
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2014:1606
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2014:1012
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2014:1012, RHSA-2014:1606
Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 7
  • Red Hat Software Collections

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-1571
  2. 2026-10-03 Alias added: GHSA-xv4r-r9fj-hh6h

References

Exploit 2

Patch 1

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences