CVE-2019-8904

Public on 2019-02-18

Modified on 2019-03-25

Description

do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.

Severity

Low

See what this means

CVSS v3 Base Score

5.4

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 1	file	2019-03-21	ALAS-2019-1186	Fixed

	Score Type	Score	Vector
Amazon Linux	CVSSv3	5.4	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L