file: Denial of Service

file: Denial of Service A vulnerability in file could allow a context-dependent attack to create a Denial of Service condition. file December 27, 2014 December 27, 2014: 1 532686 local, remote 5.21 5.21

The file utility attempts to identify a file’s format by scanning binary data for patterns.

An issue with the ELF parser used by the file utility can cause a resource consumption when reading a specially-crafted ELF binary.

A context-dependent attacker may be able to cause Denial of Service.

There is no known workaround at this time.

All file users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-apps/file-5.21"

CVE-2014-8117 Zlogene Zlogene