p PatchFirst

CVE-2014-9653

CVE-2014-9653

This page contains facts from public vulnerability sources. Check the original advisory before updating.

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

EPSS 4.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • file Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:5.22+15-1

    Update to 1:5.22+15-1

  • file Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:5.22+15-1

    Update to 1:5.22+15-1

  • file Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:5.22+15-1

    Update to 1:5.22+15-1

  • file Ubuntu:14.04:LTS

    Versions
    • 5.11-2ubuntu4
    • 1:5.14-2ubuntu1
    • 1:5.14-2ubuntu2
    • 1:5.14-2ubuntu3
    • 1:5.14-2ubuntu3.1
    • 1:5.14-2ubuntu3.2
    • 1:5.14-2ubuntu3.3
    Affected ranges
    • ECOSYSTEM: < 1:5.14-2ubuntu3.4

    Update to 1:5.14-2ubuntu3.4

Original sources

Check your server →