do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

According to the versions of the file packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - do_core_note in readelf.c in libmagic.a in file 5.35     allows remote attackers to cause a denial of service     (stack corruption and application crash) or possibly     have unspecified other impact.(CVE-2019-8907)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has an out-of-bounds read because memcpy is     misused.(CVE-2019-8906)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has a stack-based buffer over-read, related to     file_printable, a different vulnerability than     CVE-2018-10360.(CVE-2019-8905)

  - do_bid_note in readelf.c in libmagic.a in file 5.35 has     a stack-based buffer over-read, related to file_printf     and file_vprintf.(CVE-2019-8904)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the file packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - do_bid_note in readelf.c in libmagic.a in file 5.35 has     a stack-based buffer over-read, related to file_printf     and file_vprintf.(CVE-2019-8904)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has a stack-based buffer over-read, related to     file_printable, a different vulnerability than     CVE-2018-10360.(CVE-2019-8905)

  - do_core_note in readelf.c in libmagic.a in file 5.35     has an out-of-bounds read because memcpy is     misused.(CVE-2019-8906)

  - do_core_note in readelf.c in libmagic.a in file 5.35     allows remote attackers to cause a denial of service     (stack corruption and application crash) or possibly     have unspecified other impact.(CVE-2019-8907)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the file package has been released.

This update for file fixes the following issues :

The following security vulnerabilities were addressed :

  - Fixed an out-of-bounds read in the function do_core_note     in readelf.c, which allowed remote attackers to cause a     denial of service (application crash) via a crafted ELF     file (bsc#1096974 CVE-2018-10360).

  - CVE-2019-8905: Fixed a stack-based buffer over-read in     do_core_note in readelf.c (bsc#1126118)

  - CVE-2019-8906: Fixed an out-of-bounds read in     do_core_note in readelf. c (bsc#1126119)

  - CVE-2019-8907: Fixed a stack corruption in do_core_note     in readelf.c (bsc#1126117)

This update was imported from the SUSE:SLE-12:Update update project.

This update for file fixes the following issues :

The following security vulnerabilities were addressed :

Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360).

CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)

CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf.
c (bsc#1126119)

CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

do_bid_note in readelf.c in libmagic.a has a stack-based buffer over-read, related to file_printf and file_vprintf. (CVE-2019-8904)

do_core_note in readelf.c in libmagic.a has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360 . (CVE-2019-8905)

do_core_note in readelf.c in libmagic.a allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. (CVE-2019-8907)

do_core_note in readelf.c in libmagic.a has an out-of-bounds read because memcpy is misused. (CVE-2019-8906)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3911-1 advisory.

    It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this     issue to cause a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for file fixes the following issues :

The following security vulnerabilities were addressed :

  - CVE-2018-10360: Fixed an out-of-bounds read in the     function do_core_note in readelf.c, which allowed remote     attackers to cause a denial of service (application     crash) via a crafted ELF file (bsc#1096974)

  - CVE-2019-8905: Fixed a stack-based buffer over-read in     do_core_note in readelf.c (bsc#1126118)

  - CVE-2019-8906: Fixed an out-of-bounds read in     do_core_note in readelf. c (bsc#1126119)

  - CVE-2019-8907: Fixed a stack corruption in do_core_note     in readelf.c (bsc#1126117)

This update was imported from the SUSE:SLE-15:Update update project.

- CVE-2019-8907 - remote denial of service in do_core_note     in readelf.c

  - CVE-2019-8905 - stack-based buffer over-read in     do_core_note in readelf.c

  - CVE-2019-8906 - out-of-bounds read in do_core_note in     readelf.c

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for file fixes the following issues :

The following security vulnerabilities were addressed :

CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974)

CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118)

CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf.
c (bsc#1126119)

CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- CVE-2019-8907 - remote denial of service in do_core_note     in readelf.c

  - CVE-2019-8905 - stack-based buffer over-read in     do_core_note in readelf.c

  - CVE-2019-8904 - stack-based buffer over-read in     do_bid_note in readelf.c

  - CVE-2019-8906 - out-of-bounds read in do_core_note in     readelf.c

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New file packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix security issues.

ID	Name	Product	Family	Severity
140986	EulerOS Virtualization for ARM 64 3.0.6.0 : file (EulerOS-SA-2020-2038)	Nessus	Huawei Local Security Checks	high
139948	EulerOS 2.0 SP8 : file (EulerOS-SA-2020-1845)	Nessus	Huawei Local Security Checks	high
136031	Photon OS 1.0: File PHSA-2020-1.0-0289	Nessus	PhotonOS Local Security Checks	high
135863	Photon OS 2.0: File PHSA-2020-2.0-0228	Nessus	PhotonOS Local Security Checks	high
135790	Photon OS 3.0: File PHSA-2020-3.0-0080	Nessus	PhotonOS Local Security Checks	high
124052	openSUSE Security Update : file (openSUSE-2019-1197)	Nessus	SuSE Local Security Checks	high
123672	SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2019:0839-1)	Nessus	SuSE Local Security Checks	high
123091	Amazon Linux AMI : file (ALAS-2019-1186)	Nessus	Amazon Linux Local Security Checks	high
122946	Ubuntu 16.04 LTS / 18.04 LTS : file vulnerabilities (USN-3911-1)	Nessus	Ubuntu Local Security Checks	high
122942	openSUSE Security Update : file (openSUSE-2019-345)	Nessus	SuSE Local Security Checks	high
122800	Fedora 28 : file (2019-c90f32a130)	Nessus	Fedora Local Security Checks	high
122715	SUSE SLED15 / SLES15 Security Update : file (SUSE-SU-2019:0571-1)	Nessus	SuSE Local Security Checks	high
122520	Fedora 29 : file (2019-15f5147b27)	Nessus	Fedora Local Security Checks	high
122415	Slackware 14.0 / 14.1 / 14.2 / current : file (SSA:2019-054-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2019-8907

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high