| Errata ID | 366 | 
|---|---|
| Date | 2015-09-09 | 
| Source package | file | 
| Fixed in version | 5.04-5.37.201508292015 | 
| Description | These vulnerabilities have been fixed in file: * Incorrect handling of indirect rules in libmagic may lead to an infinite loop, resulting in denial of service (CVE-2014-1943) * Denial of service in libmagic (CVE-2014-2270) * Denial of service in magic for awk scripts (CVE-2013-7345) * Buffer overflow in CDF module (CVE-2014-3487, CVE-2014-3479, CVE-2014-3480, CVE-2014-0207) * Incorrect string size calculation in the softmagic module (CVE-2014-3478) * Buffer overflow in CDF parsing (CVE-2014-3587) * Out of bounds reads when parsing ELF section headers (CVE-2014-3710) * Denial of service issues in the ELF parser (CVE-2014-8116, CVE-2014-8117) * Denial of service when processing malformed ELF files (CVE-2014-9653) * Performance degradation (CVE-2014-0237) * Infinite loop or out-of-bounds memory access (CVE-2014-0238) * CPU consumption (CVE-2014-3538)  | 
				
| Additional notes | |
| CVE ID | CVE-2014-1943 CVE-2014-2270 CVE-2013-7345 CVE-2014-3487 CVE-2014-3479 CVE-2014-3480 CVE-2014-0207 CVE-2014-3478 CVE-2014-3587 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2014-9653 CVE-2014-0237 CVE-2014-0238 CVE-2014-3538  | 
  
| UCS Bug number | #34135 | 
