PT-2017-10942 · File+1 · File+1

Thomas Jarosch · Published 2017-09-05 · Updated 2024-06-15 · CVE-2017-1000249

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions file versions prior to the version containing commit 35c94dc6acc418f1ad7f6241a6680e5327495793

Description The issue allows an attacker to overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This can be exploited by leveraging a specially crafted ELF binary.

Recommendations For versions prior to the version containing commit 35c94dc6acc418f1ad7f6241a6680e5327495793, update to a version that includes the fix from commit 35c94dc6acc418f1ad7f6241a6680e5327495793 to resolve the issue. As a temporary workaround, consider restricting the use of the file() function with untrusted ELF binaries until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-1000249

DSA-3965-1

OPENSUSE-SU-2024:10755-1

Affected Products

Ubuntu

File

References · 22

• https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4d · Patch
• https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000249 · Security Note
• https://security-tracker.debian.org/tracker/source-package/file · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10755-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3965-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-1000249 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3965-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000249 · Security Note
• https://ubuntu.com/security/notices/USN-3412-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-1000249 · Vendor Advisory
• https://security.gentoo.org/glsa/201710-02 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1000249 · Vendor Advisory
• http://debian.org/security/2017/dsa-3965 · Vendor Advisory
• https://suse.com/security/cve/CVE-2007-1536 · Note