CVE-2019-8905: Medium severity Debian Debian Linux vulnerability
docorenote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintable, a different vulnerability than CVE-2018-10360.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fileto a version that resolves this vulnerability.Fixed in 1:5.44-3Fixed in 1:5.46-5Fixed in 1:5.47-4
Event History
Frequently Asked Questions
What is CVE-2019-8905?
CVE-2019-8905 is a vulnerability related to a stack-based buffer over-read in do_core_note function in libmagic.a in file 5.35.
What software versions are affected by CVE-2019-8905?
CVE-2019-8905 affects file version 5.35 on Debian Linux 8.0, Ubuntu Linux 16.04, Ubuntu Linux 18.04, Ubuntu Linux 18.10, openSUSE Leap 15.0, and openSUSE Leap 42.3.
What is the severity of CVE-2019-8905?
The severity of CVE-2019-8905 is medium with a CVSS score of 4.4.
How can I fix CVE-2019-8905 on Ubuntu Linux?
To fix CVE-2019-8905 on Ubuntu Linux, update the file package to version 1:5.35-3.
Where can I find more information about CVE-2019-8905?
You can find more information about CVE-2019-8905 at the following references: [1] [2] [3]