Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-0236
5
MEDIUMCVSS v2
Published
May 16, 2016
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.
NPM