do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.

According to the versions of the file packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - do_core_note in readelf.c in libmagic.a in file 5.35     allows remote attackers to cause a denial of service     (stack corruption and application crash) or possibly     have unspecified other impact.(CVE-2019-8907)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has an out-of-bounds read because memcpy is     misused.(CVE-2019-8906)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has a stack-based buffer over-read, related to     file_printable, a different vulnerability than     CVE-2018-10360.(CVE-2019-8905)

  - do_bid_note in readelf.c in libmagic.a in file 5.35 has     a stack-based buffer over-read, related to file_printf     and file_vprintf.(CVE-2019-8904)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the file packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - do_bid_note in readelf.c in libmagic.a in file 5.35 has     a stack-based buffer over-read, related to file_printf     and file_vprintf.(CVE-2019-8904)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has a stack-based buffer over-read, related to     file_printable, a different vulnerability than     CVE-2018-10360.(CVE-2019-8905)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has an out-of-bounds read because memcpy is     misused.(CVE-2019-8906)

  - do_core_note in readelf.c in libmagic.a in file 5.35     allows remote attackers to cause a denial of service     (stack corruption and application crash) or possibly     have unspecified other impact.(CVE-2019-8907)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the file package has been released.

do_bid_note in readelf.c in libmagic.a has a stack-based buffer over-read, related to file_printf and file_vprintf. (CVE-2019-8904)

do_core_note in readelf.c in libmagic.a has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360 . (CVE-2019-8905)

do_core_note in readelf.c in libmagic.a allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. (CVE-2019-8907)

do_core_note in readelf.c in libmagic.a has an out-of-bounds read because memcpy is misused. (CVE-2019-8906)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3911-1 advisory.

    It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this     issue to cause a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- CVE-2019-8907 - remote denial of service in do_core_note     in readelf.c

  - CVE-2019-8905 - stack-based buffer over-read in     do_core_note in readelf.c

  - CVE-2019-8904 - stack-based buffer over-read in     do_bid_note in readelf.c

  - CVE-2019-8906 - out-of-bounds read in do_core_note in     readelf.c

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
140986	EulerOS Virtualization for ARM 64 3.0.6.0 : file (EulerOS-SA-2020-2038)	Nessus	Huawei Local Security Checks	high
139948	EulerOS 2.0 SP8 : file (EulerOS-SA-2020-1845)	Nessus	Huawei Local Security Checks	high
136031	Photon OS 1.0: File PHSA-2020-1.0-0289	Nessus	PhotonOS Local Security Checks	high
135863	Photon OS 2.0: File PHSA-2020-2.0-0228	Nessus	PhotonOS Local Security Checks	high
135790	Photon OS 3.0: File PHSA-2020-3.0-0080	Nessus	PhotonOS Local Security Checks	high
123091	Amazon Linux AMI : file (ALAS-2019-1186)	Nessus	Amazon Linux Local Security Checks	high
122946	Ubuntu 16.04 LTS / 18.04 LTS : file vulnerabilities (USN-3911-1)	Nessus	Ubuntu Local Security Checks	high
122520	Fedora 29 : file (2019-15f5147b27)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2019-8904

high

Tenable Plugins

high

high

high

high

high

high

high

high