csaf_suse - suse-su-2017:3048-1

suse-su-2017:3048-1

Vulnerability from csaf_suse

Published

2017-11-22 15:30

Modified

2017-11-22 15:30

Summary

Security update for file

Notes

Title of the patch

Security update for file

Description of the patch

The GNU file utility was updated to version 5.22. Security issues fixed: - CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. (bsc#913650) - CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a large number of notes. (bsc#913651) - CVE-2014-9653: readelf.c in file did not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file. (bsc#917152) - CVE-2014-8116: The ELF parser (readelf.c) in file allowed remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities. (bsc#910253) - CVE-2014-8117: softmagic.c in file did not properly limit recursion, which allowed remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. (bsc#910253) Version update to file version 5.22 * add indirect relative for TIFF/Exif * restructure elf note printing to avoid repeated messages * add note limit, suggested by Alexander Cherepanov * Bail out on partial pread()'s (Alexander Cherepanov) * Fix incorrect bounds check in file_printable (Alexander Cherepanov) * PR/405: ignore SIGPIPE from uncompress programs * change printable -> file_printable and use it in more places for safety * in ELF, instead of '(uses dynamic libraries)' when PT_INTERP is present print the interpreter name. Version update to file version 5.21 * there was an incorrect free in magic_load_buffers() * there was an out of bounds read for some pascal strings * there was a memory leak in magic lists * don't interpret strings printed from files using the current locale, convert them to ascii format first. * there was an out of bounds read in elf note reads Update to file version 5.20 * recognize encrypted CDF documents * add magic_load_buffers from Brooks Davis * add thumbs.db support Additional non-security bug fixes: * Fixed a memory corruption during rpmbuild (bsc#1063269) * Backport of a fix for an increased printable string length as found in file 5.30 (bsc#996511) * file command throws 'Composite Document File V2 Document, corrupt: Can't read SSAT' error against excel 97/2003 file format. (bsc#1009966)

Patchnames

SUSE-CAASP-ALL-2017-1881,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-1881,SUSE-SLE-DESKTOP-12-SP2-2017-1881,SUSE-SLE-DESKTOP-12-SP3-2017-1881,SUSE-SLE-RPI-12-SP2-2017-1881,SUSE-SLE-SDK-12-SP2-2017-1881,SUSE-SLE-SDK-12-SP3-2017-1881,SUSE-SLE-SERVER-12-SP2-2017-1881,SUSE-SLE-SERVER-12-SP3-2017-1881

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for file",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe GNU file utility was updated to version 5.22.\n\nSecurity issues fixed:\n\n- CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. (bsc#913650)\n- CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a large number of notes. (bsc#913651)\n- CVE-2014-9653: readelf.c in file did not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file. (bsc#917152)\n- CVE-2014-8116: The ELF parser (readelf.c) in file allowed remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities. (bsc#910253)\n- CVE-2014-8117: softmagic.c in file did not properly limit recursion, which allowed remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. (bsc#910253)\n\nVersion update to file version 5.22\n\n* add indirect relative for TIFF/Exif\n* restructure elf note printing to avoid repeated messages\n* add note limit, suggested by Alexander Cherepanov\n* Bail out on partial pread()\u0027s (Alexander Cherepanov)\n* Fix incorrect bounds check in file_printable (Alexander Cherepanov)\n* PR/405: ignore SIGPIPE from uncompress programs\n* change printable -\u003e file_printable and use it in more places for safety\n* in ELF, instead of \u0027(uses dynamic libraries)\u0027 when PT_INTERP is present print the interpreter name.\n\nVersion update to file version 5.21\n\n* there was an incorrect free in magic_load_buffers()\n* there was an out of bounds read for some pascal strings\n* there was a memory leak in magic lists\n* don\u0027t interpret strings printed from files using the current\n  locale, convert them to ascii format first.\n* there was an out of bounds read in elf note reads\n\nUpdate to file version 5.20\n\n* recognize encrypted CDF documents\n* add magic_load_buffers from Brooks Davis\n* add thumbs.db support\n\nAdditional non-security bug fixes:\n\n* Fixed a memory corruption during rpmbuild (bsc#1063269)\n* Backport of a fix for an increased printable string length as found in file 5.30 (bsc#996511)\n* file command throws \u0027Composite Document File V2 Document, corrupt: Can\u0027t read SSAT\u0027 error against excel 97/2003 file format. (bsc#1009966)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-CAASP-ALL-2017-1881,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-1881,SUSE-SLE-DESKTOP-12-SP2-2017-1881,SUSE-SLE-DESKTOP-12-SP3-2017-1881,SUSE-SLE-RPI-12-SP2-2017-1881,SUSE-SLE-SDK-12-SP2-2017-1881,SUSE-SLE-SDK-12-SP3-2017-1881,SUSE-SLE-SERVER-12-SP2-2017-1881,SUSE-SLE-SERVER-12-SP3-2017-1881",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_3048-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:3048-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173048-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:3048-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-November/003403.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1009966",
        "url": "https://bugzilla.suse.com/1009966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1063269",
        "url": "https://bugzilla.suse.com/1063269"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 910252",
        "url": "https://bugzilla.suse.com/910252"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 910253",
        "url": "https://bugzilla.suse.com/910253"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 913650",
        "url": "https://bugzilla.suse.com/913650"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 913651",
        "url": "https://bugzilla.suse.com/913651"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 917152",
        "url": "https://bugzilla.suse.com/917152"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 996511",
        "url": "https://bugzilla.suse.com/996511"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8116 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8117 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8117/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9620 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9620/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9621 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9621/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9653 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9653/"
      }
    ],
    "title": "Security update for file",
    "tracking": {
      "current_release_date": "2017-11-22T15:30:27Z",
      "generator": {
        "date": "2017-11-22T15:30:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:3048-1",
      "initial_release_date": "2017-11-22T15:30:27Z",
      "revision_history": [
        {
          "date": "2017-11-22T15:30:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-5.22-10.3.1.aarch64",
                "product": {
                  "name": "file-5.22-10.3.1.aarch64",
                  "product_id": "file-5.22-10.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "file-magic-5.22-10.3.1.aarch64",
                "product": {
                  "name": "file-magic-5.22-10.3.1.aarch64",
                  "product_id": "file-magic-5.22-10.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-5.22-10.3.1.aarch64",
                "product": {
                  "name": "libmagic1-5.22-10.3.1.aarch64",
                  "product_id": "libmagic1-5.22-10.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "file-devel-5.22-10.3.1.aarch64",
                "product": {
                  "name": "file-devel-5.22-10.3.1.aarch64",
                  "product_id": "file-devel-5.22-10.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python-magic-5.22-10.3.1.aarch64",
                "product": {
                  "name": "python-magic-5.22-10.3.1.aarch64",
                  "product_id": "python-magic-5.22-10.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-devel-5.22-10.3.1.ppc64le",
                "product": {
                  "name": "file-devel-5.22-10.3.1.ppc64le",
                  "product_id": "file-devel-5.22-10.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python-magic-5.22-10.3.1.ppc64le",
                "product": {
                  "name": "python-magic-5.22-10.3.1.ppc64le",
                  "product_id": "python-magic-5.22-10.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "file-5.22-10.3.1.ppc64le",
                "product": {
                  "name": "file-5.22-10.3.1.ppc64le",
                  "product_id": "file-5.22-10.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "file-magic-5.22-10.3.1.ppc64le",
                "product": {
                  "name": "file-magic-5.22-10.3.1.ppc64le",
                  "product_id": "file-magic-5.22-10.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-5.22-10.3.1.ppc64le",
                "product": {
                  "name": "libmagic1-5.22-10.3.1.ppc64le",
                  "product_id": "libmagic1-5.22-10.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-devel-5.22-10.3.1.s390x",
                "product": {
                  "name": "file-devel-5.22-10.3.1.s390x",
                  "product_id": "file-devel-5.22-10.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-magic-5.22-10.3.1.s390x",
                "product": {
                  "name": "python-magic-5.22-10.3.1.s390x",
                  "product_id": "python-magic-5.22-10.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "file-5.22-10.3.1.s390x",
                "product": {
                  "name": "file-5.22-10.3.1.s390x",
                  "product_id": "file-5.22-10.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "file-magic-5.22-10.3.1.s390x",
                "product": {
                  "name": "file-magic-5.22-10.3.1.s390x",
                  "product_id": "file-magic-5.22-10.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-5.22-10.3.1.s390x",
                "product": {
                  "name": "libmagic1-5.22-10.3.1.s390x",
                  "product_id": "libmagic1-5.22-10.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-32bit-5.22-10.3.1.s390x",
                "product": {
                  "name": "libmagic1-32bit-5.22-10.3.1.s390x",
                  "product_id": "libmagic1-32bit-5.22-10.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-5.22-10.3.1.x86_64",
                "product": {
                  "name": "file-5.22-10.3.1.x86_64",
                  "product_id": "file-5.22-10.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "file-magic-5.22-10.3.1.x86_64",
                "product": {
                  "name": "file-magic-5.22-10.3.1.x86_64",
                  "product_id": "file-magic-5.22-10.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-5.22-10.3.1.x86_64",
                "product": {
                  "name": "libmagic1-5.22-10.3.1.x86_64",
                  "product_id": "libmagic1-5.22-10.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmagic1-32bit-5.22-10.3.1.x86_64",
                "product": {
                  "name": "libmagic1-32bit-5.22-10.3.1.x86_64",
                  "product_id": "libmagic1-32bit-5.22-10.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "file-devel-5.22-10.3.1.x86_64",
                "product": {
                  "name": "file-devel-5.22-10.3.1.x86_64",
                  "product_id": "file-devel-5.22-10.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-magic-5.22-10.3.1.x86_64",
                "product": {
                  "name": "python-magic-5.22-10.3.1.x86_64",
                  "product_id": "python-magic-5.22-10.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-devel-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-devel-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x"
        },
        "product_reference": "file-devel-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-devel-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "python-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "python-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "python-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "python-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-devel-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-devel-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x"
        },
        "product_reference": "file-devel-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-devel-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-devel-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "python-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "python-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "python-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "python-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x"
        },
        "product_reference": "file-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "file-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le"
        },
        "product_reference": "libmagic1-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x"
        },
        "product_reference": "file-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "file-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le"
        },
        "product_reference": "libmagic1-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x"
        },
        "product_reference": "file-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "file-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le"
        },
        "product_reference": "libmagic1-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x"
        },
        "product_reference": "file-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64"
        },
        "product_reference": "file-magic-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le"
        },
        "product_reference": "file-magic-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x"
        },
        "product_reference": "file-magic-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-magic-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64"
        },
        "product_reference": "file-magic-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le"
        },
        "product_reference": "libmagic1-5.22-10.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmagic1-32bit-5.22-10.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64"
        },
        "product_reference": "libmagic1-32bit-5.22-10.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8116",
          "url": "https://www.suse.com/security/cve/CVE-2014-8116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910252 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/910252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910253 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/910253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-8116",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-22T15:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8116"
    },
    {
      "cve": "CVE-2014-8117",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8117"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8117",
          "url": "https://www.suse.com/security/cve/CVE-2014-8117"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910252 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/910252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910253 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/910253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-8117",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-22T15:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8117"
    },
    {
      "cve": "CVE-2014-9620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9620",
          "url": "https://www.suse.com/security/cve/CVE-2014-9620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 913651 for CVE-2014-9620",
          "url": "https://bugzilla.suse.com/913651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-9620",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-22T15:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9620"
    },
    {
      "cve": "CVE-2014-9621",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9621"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9621",
          "url": "https://www.suse.com/security/cve/CVE-2014-9621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 913650 for CVE-2014-9621",
          "url": "https://bugzilla.suse.com/913650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-9621",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-22T15:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9621"
    },
    {
      "cve": "CVE-2014-9653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9653",
          "url": "https://www.suse.com/security/cve/CVE-2014-9653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917152 for CVE-2014-9653",
          "url": "https://bugzilla.suse.com/917152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:file-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-32bit-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmagic1-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:python-magic-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:file-devel-5.22-10.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:python-magic-5.22-10.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-11-22T15:30:27Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9653"
    }
  ]
}

CVE-2014-8117 (GCVE-0-2014-8117)

Vulnerability from cvelistv5

Published

2014-12-17 19:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-2535-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/71692	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/61944	third-party-advisory, x_refsource_SECUNIA
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc	vendor-advisory, x_refsource_FREEBSD
	http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2494-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031344	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/62081	third-party-advisory, x_refsource_SECUNIA
	http://seclists.org/oss-sec/2014/q4/1056	mailing-list, x_refsource_MLIST
	http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
	https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.944Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2535-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2535-1"
          },
          {
            "name": "71692",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71692"
          },
          {
            "name": "61944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61944"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "FreeBSD-SA-14:28",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "name": "USN-2494-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2494-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c"
          },
          {
            "name": "1031344",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031344"
          },
          {
            "name": "62081",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62081"
          },
          {
            "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q4/1056"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2535-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2535-1"
        },
        {
          "name": "71692",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71692"
        },
        {
          "name": "61944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61944"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "FreeBSD-SA-14:28",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "name": "USN-2494-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2494-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c"
        },
        {
          "name": "1031344",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031344"
        },
        {
          "name": "62081",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62081"
        },
        {
          "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q4/1056"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-8117",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2535-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2535-1"
            },
            {
              "name": "71692",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71692"
            },
            {
              "name": "61944",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61944"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "FreeBSD-SA-14:28",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "USN-2494-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2494-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/6f737ddfadb596d7d4a993f7ed2141ffd664a81c"
            },
            {
              "name": "1031344",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031344"
            },
            {
              "name": "62081",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62081"
            },
            {
              "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q4/1056"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8117",
    "datePublished": "2014-12-17T19:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:50.944Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8116 (GCVE-0-2014-8116)

Vulnerability from cvelistv5

Published

2014-12-17 19:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.

References

►

URL

Tags

	https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6	x_refsource_CONFIRM
	http://secunia.com/advisories/61944	third-party-advisory, x_refsource_SECUNIA
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc	vendor-advisory, x_refsource_FREEBSD
	http://www.securityfocus.com/bid/71700	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisory, x_refsource_REDHAT
	https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2494-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1031344	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/62081	third-party-advisory, x_refsource_SECUNIA
	http://seclists.org/oss-sec/2014/q4/1056	mailing-list, x_refsource_MLIST
	http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
	https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.049Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6"
          },
          {
            "name": "61944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61944"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "FreeBSD-SA-14:28",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
          },
          {
            "name": "71700",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71700"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8"
          },
          {
            "name": "USN-2494-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2494-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "1031344",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1031344"
          },
          {
            "name": "62081",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62081"
          },
          {
            "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q4/1056"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6"
        },
        {
          "name": "61944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61944"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "FreeBSD-SA-14:28",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
        },
        {
          "name": "71700",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71700"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8"
        },
        {
          "name": "USN-2494-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2494-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "1031344",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1031344"
        },
        {
          "name": "62081",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62081"
        },
        {
          "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q4/1056"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-8116",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/d7cdad007c507e6c79f51f058dd77fab70ceb9f6"
            },
            {
              "name": "61944",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61944"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "FreeBSD-SA-14:28",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc"
            },
            {
              "name": "71700",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71700"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/b4c01141e5367f247b84dcaf6aefbb4e741842b8"
            },
            {
              "name": "USN-2494-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2494-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "1031344",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1031344"
            },
            {
              "name": "62081",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62081"
            },
            {
              "name": "[oss-security] 20141216 file(1): multiple denial of service issues (resource consumption), CVE-2014-8116 and CVE-2014-8117",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q4/1056"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/blob/00cef282a902a4a6709bbbbb933ee397768caa38/ChangeLog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8116",
    "datePublished": "2014-12-17T19:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:51.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9620 (GCVE-0-2014-9620)

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 13:47

Severity ?

CWE

Summary

The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2015/01/17/9	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://usn.ubuntu.com/3686-1/	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisory, x_refsource_REDHAT
	https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4	x_refsource_CONFIRM
	http://mx.gw.com/pipermail/file/2015/001660.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/71715	vdb-entry, x_refsource_BID
	http://mx.gw.com/pipermail/file/2014/001653.html	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2015/dsa-3121	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201503-08	vendor-advisory, x_refsource_GENTOO
	http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.963Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "USN-3686-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3686-1/"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4"
          },
          {
            "name": "[File] 20150102 file 5.22 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
          },
          {
            "name": "71715",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71715"
          },
          {
            "name": "[File] 20141216 file 5.21 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001653.html"
          },
          {
            "name": "DSA-3121",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3121"
          },
          {
            "name": "GLSA-201503-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-08"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-15T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "USN-3686-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3686-1/"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4"
        },
        {
          "name": "[File] 20150102 file 5.22 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
        },
        {
          "name": "71715",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71715"
        },
        {
          "name": "[File] 20141216 file 5.21 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001653.html"
        },
        {
          "name": "DSA-3121",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3121"
        },
        {
          "name": "GLSA-201503-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-08"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "USN-3686-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3686-1/"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/ce90e05774dd77d86cfc8dfa6da57b32816841c4"
            },
            {
              "name": "[File] 20150102 file 5.22 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
            },
            {
              "name": "71715",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71715"
            },
            {
              "name": "[File] 20141216 file 5.21 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2014/001653.html"
            },
            {
              "name": "DSA-3121",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3121"
            },
            {
              "name": "GLSA-201503-08",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-08"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9620",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2015-01-17T00:00:00",
    "dateUpdated": "2024-08-06T13:47:41.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9621 (GCVE-0-2014-9621)

Vulnerability from cvelistv5

Published

2015-01-21 18:00

Modified

2024-08-06 13:47

Severity ?

CWE

Summary

The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2015/01/17/9	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3686-1/	vendor-advisory, x_refsource_UBUNTU
	http://mx.gw.com/pipermail/file/2014/001654.html	mailing-list, x_refsource_MLIST
	http://mx.gw.com/pipermail/file/2015/001660.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201503-08	vendor-advisory, x_refsource_GENTOO
	http://advisories.mageia.org/MGASA-2015-0040.html	x_refsource_CONFIRM
	https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.915Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
          },
          {
            "name": "USN-3686-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3686-1/"
          },
          {
            "name": "[File] 20141216 file 5.21 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001654.html"
          },
          {
            "name": "[File] 20150102 file 5.22 is now available",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
          },
          {
            "name": "GLSA-201503-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-08"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-15T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
        },
        {
          "name": "USN-3686-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3686-1/"
        },
        {
          "name": "[File] 20141216 file 5.21 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001654.html"
        },
        {
          "name": "[File] 20150102 file 5.22 is now available",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
        },
        {
          "name": "GLSA-201503-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-08"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9621",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20150117 Re: CVE request: file(1) DoS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/01/17/9"
            },
            {
              "name": "USN-3686-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3686-1/"
            },
            {
              "name": "[File] 20141216 file 5.21 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2014/001654.html"
            },
            {
              "name": "[File] 20150102 file 5.22 is now available",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2015/001660.html"
            },
            {
              "name": "GLSA-201503-08",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-08"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0040.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0040.html"
            },
            {
              "name": "https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9621",
    "datePublished": "2015-01-21T18:00:00",
    "dateReserved": "2015-01-17T00:00:00",
    "dateUpdated": "2024-08-06T13:47:41.915Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-9653 (GCVE-0-2014-9653)

Vulnerability from cvelistv5

Published

2015-03-30 10:00

Modified

2024-08-06 13:47

Severity ?

CWE

Summary

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.

References

►

URL

Tags

	http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor-advisory, x_refsource_HP
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://usn.ubuntu.com/3686-1/	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2015/02/05/13	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2015/dsa-3196	vendor-advisory, x_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2016-0760.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	x_refsource_CONFIRM
	http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://mx.gw.com/pipermail/file/2014/001649.html	mailing-list, x_refsource_MLIST
	http://bugs.gw.com/view.php?id=409	x_refsource_CONFIRM
	https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/72516	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-42	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.805Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBMU03409",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "USN-3686-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3686-1/"
          },
          {
            "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/02/05/13"
          },
          {
            "name": "DSA-3196",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3196"
          },
          {
            "name": "HPSBMU03380",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
          },
          {
            "name": "RHSA-2016:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "[file] 20141216 [PATCH] readelf.c: better checks for values returned by pread",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mx.gw.com/pipermail/file/2014/001649.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gw.com/view.php?id=409"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f"
          },
          {
            "name": "72516",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72516"
          },
          {
            "name": "GLSA-201701-42",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-42"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-15T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "HPSBMU03409",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "USN-3686-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3686-1/"
        },
        {
          "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/02/05/13"
        },
        {
          "name": "DSA-3196",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3196"
        },
        {
          "name": "HPSBMU03380",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
        },
        {
          "name": "RHSA-2016:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "[file] 20141216 [PATCH] readelf.c: better checks for values returned by pread",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mx.gw.com/pipermail/file/2014/001649.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gw.com/view.php?id=409"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f"
        },
        {
          "name": "72516",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72516"
        },
        {
          "name": "GLSA-201701-42",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-42"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9653",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBMU03409",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "USN-3686-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3686-1/"
            },
            {
              "name": "[oss-security] 20150205 Re: CVE Request: PHP/file: out-of-bounds memory access in softmagic",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2015/02/05/13"
            },
            {
              "name": "DSA-3196",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3196"
            },
            {
              "name": "HPSBMU03380",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
            },
            {
              "name": "RHSA-2016:0760",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0760.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "[file] 20141216 [PATCH] readelf.c: better checks for values returned by pread",
              "refsource": "MLIST",
              "url": "http://mx.gw.com/pipermail/file/2014/001649.html"
            },
            {
              "name": "http://bugs.gw.com/view.php?id=409",
              "refsource": "CONFIRM",
              "url": "http://bugs.gw.com/view.php?id=409"
            },
            {
              "name": "https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f",
              "refsource": "CONFIRM",
              "url": "https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f"
            },
            {
              "name": "72516",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72516"
            },
            {
              "name": "GLSA-201701-42",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-42"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9653",
    "datePublished": "2015-03-30T10:00:00",
    "dateReserved": "2015-02-05T00:00:00",
    "dateUpdated": "2024-08-06T13:47:41.805Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:3048-1

Vulnerability from csaf_suse

CVE-2014-8117 (GCVE-0-2014-8117)

Vulnerability from cvelistv5

CVE-2014-8116 (GCVE-0-2014-8116)

Vulnerability from cvelistv5

CVE-2014-9620 (GCVE-0-2014-9620)

Vulnerability from cvelistv5

CVE-2014-9621 (GCVE-0-2014-9621)

Vulnerability from cvelistv5

CVE-2014-9653 (GCVE-0-2014-9653)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature