file: Denial of Service

file: Denial of Service Vulnerabilities in file could allow a context-dependent attack to create a Denial of Service condition. file,Dos 2015-03-16 2015-03-16 503582 532768 local, remote 5.22 5.22

The file utility attempts to identify a file’s format by scanning binary data for patterns.

Multiple issues with the ELF parser used by the file utility have been detected and fixed.

A context-dependent attacker can cause Denial of Service.

There is no known workaround at this time.

All file users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-apps/file-5.22"

CVE-2014-2270 CVE-2014-9620 CVE-2014-9621 BlueKnight K_F