PT-2018-1825 · File+4 · File+4
Published
2018-06-11
·
Updated
2024-06-15
·
CVE-2018-10360
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
file version 5.33
Description:
The issue is related to the do core note function in the file command, which is affected by a buffer overflow error. This error allows for out-of-bounds reading, potentially leading to a denial of service. The exploitation of this issue can be triggered by a remote attacker using a specially crafted ELF file, causing the application to crash.
Recommendations:
For file version 5.33, consider restricting the use of the
do core note function until a patch is available. As a temporary workaround, avoid using the file command with untrusted ELF files to minimize the risk of exploitation.Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Red Hat
Suse
Ubuntu
File