CVE-2017-1000249

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3965
https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793Patch, Third Party Advisory
https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4dPatch, Third Party Advisory
https://security.gentoo.org/glsa/201710-02
http://www.debian.org/security/2017/dsa-3965
https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793Patch, Third Party Advisory
https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4dPatch, Third Party Advisory
https://security.gentoo.org/glsa/201710-02

Timeline

Published: Sep 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10002506.5All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attac CVE-2017-10002518.0The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vuln CVE-2017-10002525.5The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor h CVE-2017-10002537.8Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 CVE-2017-10002547.5libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymo CVE-2017-10002555.5On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel wi CVE-2017-10002568.1libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a fa CVE-2017-10002579.1An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, lib CVE-2017-100034.5Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library). The supported version CVE-2017-10003539.8Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthent CVE-2017-10003548.8Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkin CVE-2017-10003556.5Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void