CVE-2019-8905

4.4

MEDIUMCVSS v3

Published

February 18, 2019

CVSS v2

3.6 LOW

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.

file

NPMHigher level path and file manipulation functions.

= 5.35NVD

@ygor/file

NPMA transformable file object.

= 5.35NVD

file/file

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Read-only mirror of file CVS repository, updated every half hour. NOTE: do not make pull requests here, nor comment any commits, submit them usual way to bug tracker or to the mailing list. Maintainer(s) are not tracking this git mirror.

= 5.35NVD

file

Crates.ioFile abstractions for async runtimes

= 5.35NVD

file

Python Package IndexCFFI bindings for libmagic.

= 5.35NVD

opensuse/leap

Docker HubOfficial openSUSE Leap Images

= 15.0, = 42.3NVD

Security Advisories

CVE-2019-8905

Description

More on this CVE