The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.

The remote host is affected by the vulnerability described in GLSA-201412-11 (AMD64 x86 emulation base libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in AMD64 x86 emulation       base libraries. Please review the CVE identifiers referenced below for       details.
  Impact :

    A context-dependent attacker may be able to execute arbitrary code,       cause a Denial of Service condition, or obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The update to correct CVE-2007-1536 (MDKSA-2007:067), a buffer overflow in the file_printf() function, introduced a new integer overflow as reported by Colin Percival. This flaw, if an attacker could trick a user into running file on a specially crafted file, could possibly lead to the execution of arbitrary code with the privileges of the user running file (CVE-2007-2799).

As well, in file 4.20, flawed regular expressions to identify OS/2 REXX files could lead to a denial of service via CPU consumption (CVE-2007-2026).

The updated packages have been patched to correct these issues.

The remote host is affected by the vulnerability described in GLSA-200704-13 (File: Denial of Service)

    Conor Edberg discovered an error in the way file processes a specific     regular expression.
  Impact :

    A remote attacker could entice a user to open a specially crafted file,     using excessive CPU ressources and possibly leading to a Denial of     Service. Note that this vulnerability could be also triggered through     an automatic file scanner like amavisd-new.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
79964	GLSA-201412-11 : AMD64 x86 emulation base libraries: Multiple vulnerabilities (Heartbleed)	Nessus	Gentoo Local Security Checks	critical
25439	Mandrake Linux Security Advisory : file (MDKSA-2007:114)	Nessus	Mandriva Local Security Checks	high
25058	GLSA-200704-13 : File: Denial of Service	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2007-2026

high

Tenable Plugins

critical

high

high