CVE-2019-8906

4.4

MEDIUMCVSS v3

Published

February 18, 2019

CVSS v2

3.6 LOW

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

file

NPMHigher level path and file manipulation functions.

= 5.35NVD

@ygor/file

NPMA transformable file object.

= 5.35NVD

file/file

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Read-only mirror of file CVS repository, updated every half hour. NOTE: do not make pull requests here, nor comment any commits, submit them usual way to bug tracker or to the mailing list. Maintainer(s) are not tracking this git mirror.

= 5.35NVD

file

Crates.ioFile abstractions for async runtimes

= 5.35NVD

file

Python Package IndexCFFI bindings for libmagic.

= 5.35NVD

opensuse/leap

Docker HubOfficial openSUSE Leap Images

= 42.3, = 15.0NVD

Security Advisories

CVE-2019-8906

Description

More on this CVE