CVE-2014-8117

File < 5.20 - Resource Management Error

Title source: rule
STIX 2.1

Description

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.

References (14)

Core 14
Core References
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2535-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71692
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61944
Vendor Advisory vendor-advisory x_refsource_freebsd
https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2494-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031344
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62081
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2014/q4/1056
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2015-0040.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-0760.html

Scores

EPSS 0.1645
EPSS Percentile 94.9%

Details

CWE
CWE-399
Status published
Products (7)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
file_project/file < 5.20
freebsd/freebsd
mageia/mageia 4.0
Published Dec 17, 2014
Tracked Since Feb 18, 2026