security advisorycriticaldebian
Francisco Alonso of Red Hat Product Security found an issue in the file utility: when checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service (out-of-bounds read and application crash) by supplying a specially . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3072-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst November 11, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : file CVE ID : CVE-2014-3710 Debian Bug : 768806 Francisco Alonso of Red Hat Product Security found an issue in the file utility: when checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service (out-of-bounds read and application crash) by supplying a specially crafted ELF file. For the stable distribution (wheezy), this problem has been fixed in version 5.11-2+deb7u6. For the upcoming stable distribution (jessie), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 1:5.20-2. We recommend that you upgrade your file packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Ubuntu Security Notice USN-1234-1 addresses a vulnerability within the gzip utility, which could lead to performance degradation when handling specially crafted zip archives.. Debian 7 Wheezy, DoS Threat, Elf File Security. . Severity: Critical. LinuxSecurity.com Team
Nov 12, 2014
•Critical
Debian