CVE-2013-7345MEDIUM
Description
The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.
References
http://bugs.gw.com/view.php?id=164
http://rhn.redhat.com/errata/RHSA-2014-1765.html
http://support.apple.com/kb/HT6443
http://www.debian.org/security/2014/dsa-2873
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993
https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:christos_zoulas:file:5.00:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.01:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.02:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.03:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.04:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.05:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.06:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.07:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.08:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.09:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.10:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.11:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.12:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:5.13:*:*:*:*:*:*:*
cpe:2.3:a:christos_zoulas:file:*:*:*:*:*:*:*:* versions up to 5.14 (inclusive)
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 124927 | EulerOS Virtualization 3.0.1.0 : file (EulerOS-SA-2019-1424) | Nessus | Huawei Local Security Checks | high |
| 92905 | FreeBSD : FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3) (70140f20-6007-11e6-a6c3-14dae9d210b8) | Nessus | FreeBSD Local Security Checks | medium |
| 82333 | Mandriva Linux Security Advisory : php (MDVSA-2015:080) | Nessus | Mandriva Local Security Checks | high |
| 78861 | Debian DSA-3064-1 : php5 - security update | Nessus | Debian Local Security Checks | high |
| 78556 | PHP 5.6.0 Multiple Vulnerabilities | Nessus | CGI abuses | high |
| 78286 | Amazon Linux AMI : php54 (ALAS-2014-343) | Nessus | Amazon Linux Local Security Checks | medium |
| 78285 | Amazon Linux AMI : php55 (ALAS-2014-342) | Nessus | Amazon Linux Local Security Checks | medium |
| 78276 | Amazon Linux AMI : php54 (ALAS-2014-333) | Nessus | Amazon Linux Local Security Checks | medium |
| 78275 | Amazon Linux AMI : php55 (ALAS-2014-332) | Nessus | Amazon Linux Local Security Checks | medium |
| 77748 | Mac OS X 10.9.x < 10.9.5 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | critical |
| 77455 | GLSA-201408-11 : PHP: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 77452 | GLSA-201408-08 : file: Denial of Service | Nessus | Gentoo Local Security Checks | medium |
| 77044 | Oracle Linux 7 : php (ELSA-2014-1013) | Nessus | Oracle Linux Local Security Checks | high |
| 77033 | CentOS 7 : php (CESA-2014:1013) | Nessus | CentOS Local Security Checks | high |
| 77016 | RHEL 7 : php (RHSA-2014:1013) | Nessus | Red Hat Local Security Checks | high |
| 76525 | Ubuntu 10.04 LTS / 12.04 LTS / 13.10 / 14.04 LTS : file vulnerabilities (USN-2278-1) | Nessus | Ubuntu Local Security Checks | medium |
| 76377 | Fedora 20 : file-5.19-1.fc20 (2014-7992) | Nessus | Fedora Local Security Checks | medium |
| 75311 | openSUSE Security Update : file (openSUSE-SU-2014:0481-1) | Nessus | SuSE Local Security Checks | medium |
| 73651 | Amazon Linux AMI : file (ALAS-2014-323) | Nessus | Amazon Linux Local Security Checks | medium |
| 73638 | Slackware 14.0 / 14.1 / current : php (SSA:2014-111-02) | Nessus | Slackware Local Security Checks | medium |
| 73542 | Fedora 20 : php-5.5.11-1.fc20 (2014-4767) | Nessus | Fedora Local Security Checks | medium |
| 73540 | Fedora 19 : php-5.5.11-1.fc19 (2014-4735) | Nessus | Fedora Local Security Checks | medium |
| 73466 | Mandriva Linux Security Advisory : php (MDVSA-2014:075) | Nessus | Mandriva Local Security Checks | medium |
| 73448 | Mandriva Linux Security Advisory : file (MDVSA-2014:073) | Nessus | Mandriva Local Security Checks | medium |
| 73411 | PHP 5.5.x < 5.5.11 awk Magic Parsing BEGIN DoS | Nessus | CGI abuses | medium |
| 73338 | PHP 5.4.x < 5.4.27 awk Magic Parsing BEGIN DoS | Nessus | CGI abuses | medium |
| 73218 | Fedora 20 : file-5.14-20.fc20 (2014-4340) | Nessus | Fedora Local Security Checks | medium |
| 72952 | Debian DSA-2873-1 : file - several vulnerabilities | Nessus | Debian Local Security Checks | medium |