Unscored severity · published Dec 17, 2014
CVE-2014-8117
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors
–
CVSS
5.9%
EPSS
No
On KEV
Description
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
File · File Project
through 5.20 · source: NVD
FR
Freebsd · Freebsd
All versions, or not specified · source: NVD
MA
Mageia · Mageia
4.0 · source: NVD
UL
Ubuntu Linux · Canonical
10.04; 12.04; 14.04; 14.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8117
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8117
Third Party Advisory
http://advisories.mageia.org/MGASA-2015-0040.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2016-0760.html
Mailing List
http://seclists.org/oss-sec/2014/q4/1056
secunia.com
http://secunia.com/advisories/61944
secunia.com
http://secunia.com/advisories/62081
www.oracle.com
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation