DSA-5489: -1 file -- security update

Published Sep 4, 2023

Updated

A buffer overflow was found in file, a file type classification tool, which may result in denial of service if a specially crafted file is processed.

Affected Software

2 affected components

debian/file

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade file to a version that resolves this vulnerability.
Patch DSA-5489-1

Event History

Sep 4, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-48554

Frequently Asked Questions

Who is exposed to this issue?

Systems using Debian's file utility are exposed when they process specially crafted files. The described impact is denial of service.

What does an attacker need to exploit it?

An attacker needs to cause the file utility to process a specially crafted file. The available information does not describe any additional access requirements or attack vectors.

How can I tell whether a system may be affected?

Check whether the system uses the Debian file package and whether it processes untrusted files with the file utility. The provided data does not include affected or fixed package versions.

DSA-5489: -1 file -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I tell whether a system may be affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I tell whether a system may be affected?