Total vulnerabilities in the database
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
| Software | From | Fixed in |
|---|---|---|
| file / file | 3.33 | 3.33.x |
| file / file | 3.28 | 3.28.x |
| file / file | 3.35 | 3.35.x |
| file / file | 3.30 | 3.30.x |
| file / file | 3.36 | 3.36.x |
| file / file | 3.39 | 3.39.x |
| file / file | 3.40 | 3.40.x |
| file / file | 3.32 | 3.32.x |
| file / file | 3.34 | 3.34.x |
| file / file | 3.37 | 3.37.x |
| netbsd / netbsd | 1.5.3 | 1.5.3.x |
| netbsd / netbsd | 1.6 | 1.6.x |
| netbsd / netbsd | 1.5 | 1.5.x |
| netbsd / netbsd | 1.5.1 | 1.5.1.x |
| netbsd / netbsd | 1.5.2 | 1.5.2.x |