file 'readelf.c' Out-of-Bounds Read Vulnerability

BID:72516

Info

file 'readelf.c' Out-of-Bounds Read Vulnerability

Bugtraq ID: 72516
Class: Boundary Condition Error
CVE: CVE-2014-9653
Remote: Yes
Local: No
Published: Feb 05 2015 12:00AM
Updated: Jan 23 2017 09:11AM
Credit: Moritz Muehlenhoff
Vulnerable: Pexip Pexip Infinity 8.0
Pexip Pexip Infinity 7.0
Pexip Pexip Infinity 6.0
Pexip Pexip Infinity 5.0
Pexip Pexip Infinity 4.0
Pexip Pexip Infinity 3.0
Pexip Pexip Infinity 2.0
Pexip Pexip Infinity 1.0
Oracle Linux 0
Oracle Enterprise Linux 7
IBM SmartCloud Entry 3.2 Fix Pack 18
IBM SmartCloud Entry 3.2 fix pack 14
IBM SmartCloud Entry 3.2 Fix Pack 11
IBM SmartCloud Entry 3.2 Appliance fix pack 2
IBM SmartCloud Entry 3.2
IBM SmartCloud Entry 3.1 fix pack 13
IBM SmartCloud Entry 3.1 Fix Pack 10
IBM SmartCloud Entry 3.1
IBM SmartCloud Entry 2.4 Appliance fix pack 4
IBM SmartCloud Entry 2.3 Fix Pack 1
IBM SmartCloud Entry 2.3 Appliance fix pack 6
IBM SmartCloud Entry 2.3 Appliance fix pack 4
IBM SmartCloud Entry 2.2 Fix Pack 2
IBM SmartCloud Entry 2.2 Fix Pack 1
IBM SmartCloud Entry 2.2 Appliance fix pack 6
IBM SmartCloud Entry 2.2 Appliance fix pack 4
IBM SmartCloud Entry 2.2
IBM SmartCloud Entry 3.2.0.4
IBM SmartCloud Entry 3.2.0.3
IBM SmartCloud Entry 3.2.0.2
IBM SmartCloud Entry 3.2.0.1
IBM SmartCloud Entry 3.2.0.0
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4 Appliance FP
IBM SmartCloud Entry 3.1.0.4
IBM SmartCloud Entry 3.1.0.3
IBM SmartCloud Entry 3.1.0.2
IBM SmartCloud Entry 3.1.0.1
IBM SmartCloud Entry 2.4.0.4 Appliance Fi
IBM SmartCloud Entry 2.4.0.4 Appliance Fi
IBM SmartCloud Entry 2.4.0.3 Appliance FP
IBM SmartCloud Entry 2.4.0 fix pack 1
IBM SmartCloud Entry 2.4.0
IBM SmartCloud Entry 2.3.0.4 Appliance FP
IBM SmartCloud Entry 2.3.0.4 Appliance FP
IBM SmartCloud Entry 2.3.0.4 Appliance Fi
IBM SmartCloud Entry 2.3.0.4 Appliance Fi
IBM SmartCloud Entry 2.3.0.3 JRE Update 4
IBM SmartCloud Entry 2.3.0.3 Appliance FP
IBM SmartCloud Entry 2.3.0.3 Appliance FP
IBM SmartCloud Entry 2.3.0
IBM SmartCloud Entry 2.2.0.4 Appliance Fi
IBM SmartCloud Entry 2.2.0.4 Appliance Fi
IBM SmartCloud Entry 2.2.0.3 Appliance FP
IBM Security Network Protection 5.3.2
IBM Security Network Protection 5.3.1
IBM PowerKVM 3.1
IBM PowerKVM 2.1
Ian Darwin file 5.21
HP Virtual Connect Enterprise Manager 6.2
HP Virtual Connect Enterprise Manager 6.1
HP Virtual Connect Enterprise Manager 6.0
HP Version Control Repository Manager 7.4.1
HP Version Control Repository Manager 7.4
HP Version Control Repository Manager 7.3.4
HP Version Control Repository Manager 7.3.1
HP Version Control Repository Manager 7.3
HP Version Control Repository Manager 7.2.2
HP Version Control Repository Manager 7.2.1
HP Version Control Repository Manager 7.2
HP Version Control Repository Manager 7.4.0a
HP Version Control Repository Manager 7.3.3
HP Version Control Repository Manager 7.3.2
HP Version Control Agent 7.3.5
HP Version Control Agent 7.3.4
HP Version Control Agent 7.3.3
HP Version Control Agent 7.3.1
HP Version Control Agent 7.3
HP Version Control Agent 7.2.2
HP Version Control Agent 7.2.1
HP Version Control Agent 7.2
HP Version Control Agent 2.1.5
HP Version Control Agent 7.3.2
HP Systems Insight Manager 7.1.1
HP Systems Insight Manager 7.4
HP Systems Insight Manager 7.3.2
HP Systems Insight Manager 7.3.1
HP Systems Insight Manager 7.3
HP Systems Insight Manager 7.2.2
HP Systems Insight Manager 7.2.1
HP Systems Insight Manager 7.2
HP Systems Insight Manager 7.0
HP Systems Insight Manager 6.3
HP Systems Insight Manager 6.2
HP Systems Insight Manager 6.1
HP Systems Insight Manager 6.0
HP Systems Insight Manager 5.3
HP Systems Insight Manager 5.0
HP Systems Insight Manager 4.2
HP System Management Homepage (SMH) 7.4
HP System Management Homepage 7.3.2
HP System Management Homepage 7.2.3
HP System Management Homepage 7.2.2
HP System Management Homepage 7.2.1
HP System Management Homepage 7.2
HP System Management Homepage 7.1.2
HP System Management Homepage 7.1.1
HP System Management Homepage 6.2.2 7
HP System Management Homepage 3.2.7
HP System Management Homepage 3.0.2 .77
HP System Management Homepage 3.0 .68
HP System Management Homepage 3.0 .64
HP System Management Homepage 2.2.9 .1
HP System Management Homepage 2.2.8
HP System Management Homepage 2.2.6
HP System Management Homepage 2.1.15
HP System Management Homepage 2.1.12
HP System Management Homepage 2.1.11
HP System Management Homepage 2.1.10
HP System Management Homepage 2.1.9
HP System Management Homepage 2.1.8
HP System Management Homepage 2.1.7
HP System Management Homepage 2.1.6
HP System Management Homepage 2.1.5
HP System Management Homepage 2.1.4
HP System Management Homepage 2.1.3
HP System Management Homepage 2.1.2
HP System Management Homepage 2.1.1
HP System Management Homepage 2.1
HP System Management Homepage 2.0.2
HP System Management Homepage 2.0.1
HP System Management Homepage 2.0
HP System Management Homepage 7.4
HP System Management Homepage 7.3.3.1
HP System Management Homepage 7.3.1
HP System Management Homepage 7.3
HP System Management Homepage 7.2.4.1
HP System Management Homepage 7.2
HP System Management Homepage 7.1
HP System Management Homepage 7.0
HP System Management Homepage 6.3.0
HP System Management Homepage 6.3
HP System Management Homepage 6.2.0
HP System Management Homepage 6.2
HP System Management Homepage 6.0
HP System Management Homepage 3.2.2
HP System Management Homepage 3.0.1
HP Insight Orchestration 6.2
HP Insight Orchestration 6.1
HP Insight Orchestration 6.0
Gentoo Linux
Not Vulnerable: Pexip Pexip Infinity 9.0
IBM PowerKVM 2.1.1 SP3
IBM PowerKVM 2.1.1 Build 65.6
IBM PowerKVM 3.1 Build 3
HP Virtual Connect Enterprise Manager SDK 7.5.0
HP Version Control Repository Manager 7.5.0
HP Version Control Agent 7.5.0
HP Systems Insight Manager 7.5.0
HP System Management Homepage (SMH) 7.5
HP System Management Homepage 7.5
HP Insight Orchestration 7.5.0

Discussion

file 'readelf.c' Out-of-Bounds Read Vulnerability

file is prone to an out-of-bounds read vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

file 5.21 is vulnerable; other versions may also be affected.

Solution / Fix

file 'readelf.c' Out-of-Bounds Read Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report