CVE-2014-9653 in File
Résumé (Anglaise)
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Réserver
04/02/2015
Divulgation
30/03/2015
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 69090 | Christos Zoulas File readelf.c élévation de privilèges | 20 | Non prouvée | Correctif officiel | CVE-2014-9653 |