file 'src/readelf.c' Denial of Service Vulnerability

Bugtraq ID:	71715
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-9620
Remote:	Yes
Local:	No
Published:	Dec 17 2014 12:00AM
Updated:	Sep 21 2016 03:00PM
Credit:	Alexander Cherepanov
Vulnerable:	Pexip Pexip Infinity 8.0 Pexip Pexip Infinity 7.0 Pexip Pexip Infinity 6.0 Pexip Pexip Infinity 5.0 Pexip Pexip Infinity 4.0 Pexip Pexip Infinity 3.0 Pexip Pexip Infinity 2.0 Pexip Pexip Infinity 1.0 IBM SmartCloud Entry 3.2 Fix Pack 18 IBM SmartCloud Entry 3.2 fix pack 14 IBM SmartCloud Entry 3.2 Fix Pack 11 IBM SmartCloud Entry 3.2 Appliance fix pack 2 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.1 fix pack 13 IBM SmartCloud Entry 3.1 Fix Pack 10 IBM SmartCloud Entry 3.1 IBM SmartCloud Entry 2.4 Appliance fix pack 4 IBM SmartCloud Entry 2.3 Fix Pack 1 IBM SmartCloud Entry 2.3 Appliance fix pack 6 IBM SmartCloud Entry 2.3 Appliance fix pack 4 IBM SmartCloud Entry 2.2 Fix Pack 2 IBM SmartCloud Entry 2.2 Fix Pack 1 IBM SmartCloud Entry 2.2 Appliance fix pack 6 IBM SmartCloud Entry 2.2 Appliance fix pack 4 IBM SmartCloud Entry 2.2 IBM SmartCloud Entry 3.2.0.4 IBM SmartCloud Entry 3.2.0.3 IBM SmartCloud Entry 3.2.0.2 IBM SmartCloud Entry 3.2.0.1 IBM SmartCloud Entry 3.2.0.0 IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 IBM SmartCloud Entry 3.1.0.3 IBM SmartCloud Entry 3.1.0.2 IBM SmartCloud Entry 3.1.0.1 IBM SmartCloud Entry 2.4.0.4 Appliance Fi IBM SmartCloud Entry 2.4.0.4 Appliance Fi IBM SmartCloud Entry 2.4.0.3 Appliance FP IBM SmartCloud Entry 2.4.0 fix pack 1 IBM SmartCloud Entry 2.4.0 IBM SmartCloud Entry 2.3.0.4 Appliance FP IBM SmartCloud Entry 2.3.0.4 Appliance FP IBM SmartCloud Entry 2.3.0.4 Appliance Fi IBM SmartCloud Entry 2.3.0.4 Appliance Fi IBM SmartCloud Entry 2.3.0.3 JRE Update 4 IBM SmartCloud Entry 2.3.0.3 Appliance FP IBM SmartCloud Entry 2.3.0.3 Appliance FP IBM SmartCloud Entry 2.3.0 IBM SmartCloud Entry 2.2.0.4 Appliance Fi IBM SmartCloud Entry 2.2.0.4 Appliance Fi IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM Security Network Protection 5.3.2 IBM Security Network Protection 5.3.1 Ian Darwin file 5.21 Ian Darwin file 5.20 Ian Darwin file 5.19 Ian Darwin file 5.18 Ian Darwin file 5.17 Ian Darwin file 5.16 Ian Darwin file 5.10 Ian Darwin file 5.08 Gentoo Linux
Not Vulnerable:	Pexip Pexip Infinity 9.0 Ian Darwin file 5.22

file 'src/readelf.c' Denial of Service Vulnerability

file is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause excessive resource consumption, resulting in a denial-of-service condition.

file 'src/readelf.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

file 'src/readelf.c' Denial of Service Vulnerability

References:

• CVE request: file(1) DoS (Alexander Cherepanov)
  
• file Homepage (Ian Darwin)
  
• isg3T1024195:File vulnerabilities affect IBM SmartClound Entry (IBM)
  
• pexip Security Bulletin: Multiple vulnerabilities (Pexip)
  
• swg21985753:Multiple vulnerabilities in file affect IBM Security Network Protect (IBM)