CVE-2017-1000249
Description
An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).
Risk Information
Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.138
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Tool to determine file types (USN-3412-1) file_5.29-3ubuntu0.1_i386.deb | Linux |
| Tool to determine file types (USN-3412-1) file_5.29-3ubuntu0.1_amd64.deb | Linux |
| Tool to determine file types (USN-3412-1) libmagic1_5.29-3ubuntu0.1_i386.deb | Linux |
| Tool to determine file types (USN-3412-1) libmagic1_5.29-3ubuntu0.1_amd64.deb | Linux |
| file security update(DSA-3965-1) file_5.30-1_i386.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234