An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).

- fix a possible stack based buffer overflow     (CVE-2017-1000249)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201710-02 (file: Stack-based buffer overflow)

    An issue discovered in file allows attackers to write 20 bytes to the       stack buffer via a specially crafted .notes section.
  Impact :

    A remote attacker, by using a specially crafted .notes section in an ELF       binary, could execute arbitrary code or cause a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

An issue in file allowed an attacker to overwrite a fixed 20-byte stack buffer with a specially crafted .notes section in an ELF binary.

Thomas Jarosch discovered that file incorrectly handled certain ELF files. An attacker could use this to cause file to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Thomas Jarosch discovered a stack-based buffer overflow flaw in file, a file type classification tool, which may result in denial of service if an ELF binary with a specially crafted .notes section is processed.

ID	Name	Product	Family	Severity
105899	Fedora 27 : file (2017-6a10869603)	Nessus	Fedora Local Security Checks	medium
103720	GLSA-201710-02 : file: Stack-based buffer overflow	Nessus	Gentoo Local Security Checks	medium
103652	Amazon Linux AMI : file (ALAS-2017-900)	Nessus	Amazon Linux Local Security Checks	medium
103118	Fedora 26 : file (2017-bb4c07b01a)	Nessus	Fedora Local Security Checks	medium
103047	Ubuntu 17.04 : file vulnerability (USN-3412-1)	Nessus	Ubuntu Local Security Checks	medium
102963	Debian DSA-3965-1 : file - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2017-1000249

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium