CVE-2014-8116 in file
Summary
The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/10/2014
Disclosure
12/17/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68460 | Christos Zoulas file ELF Parser readelf.c resource management | 399 | Unproven | Official fix | CVE-2014-8116 |