CVE-2019-18218
21.10.2019, 05:15
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| file_project | file | 𝑥 ≤ 5.37 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| opensuse | leap | 15.1 |
| netapp | active_iq_unified_manager | 7.3 ≤ |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.04 |
| canonical | ubuntu_linux | 19.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| file |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| file-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| file-magic |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libmagic1 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libmagic1-32bit |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References