Home page logo
/

oss-sec logo oss-sec mailing list archives

Re: CVE Request: file: crashes when checking softmagic for some corrupt PE executables
From: cve-assign () mitre org
Date: Wed, 5 Mar 2014 12:07:25 -0500 (EST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

file can be made to crash when checking some corrupt PE executables,
and so could be used to mount a denial of service for file, or an
application using file/libmagic.

http://bugs.gw.com/view.php?id=313

https://github.com/glensc/file/commit/447558595a3650db2886cd2f416ad0beba965801

Use CVE-2014-2270.

A CVE ID seems worthwhile because of possible libmagic use cases.

"file can be made to crash" is typically not security-relevant on its
own (a user can recover from this by not continuing to run file on the
same crafted file). We're not sure whether any distribution has
packages that rely on server-side use of libmagic, or whether it's
common to have long-running processes that use libmagic with untrusted
input.

"apt-rdepends --reverse file" gave some hints that resulted in these
possibilities, but the actual use of file (or libmagic) within these
packages was not investigated:

  https://packages.debian.org/wheezy/bacula-director-sqlite3

  network backup service - SQLite 3 storage for Director

  The Bacula Director service supervises all the backup, restore,
  verify, and archive operations. It can run as a daemon

  dep: file


  https://packages.debian.org/wheezy/guestfsd

  This package contains a standalone version the back-end daemon that
  carries out file system access on behalf of libguestfs applications.

  dep: file

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTF1kXAAoJEKllVAevmvmscocH/RQlnUoI+5ycxSb4/Y9iqkwq
Fn4zG/6pMR5kcoJPI4e45kkKRlMcJgrYI+2toaye9+/zcRrzY7XKKMVp6uFWM1Hp
FiE2Kui3jP1gXrX2vahpZ9eSSpg16cTrXUux6H8iZPsButaLP6+2gx8UhUTYcTkB
KCmF04sfozVhU8rruJP8gOK/VzF9rAgc1bnQMJCEsWsrAGCdNcIVVLLD/SxrWA62
Visc8xH4ChW0jxDvVr7Y07aVmG2ncfKYoc7wR6KKyfeksBEIK1Evl6uGai4yZHf1
VU81TnGwpSqFZ1L5+XChPPQP9Z+pjnuy1c0qXdy7/1Ml4ioTn5LknI8+yGJ5syE=
=a0pY
-----END PGP SIGNATURE-----


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault