VULNERABILITY INTELLIGENCE

CVE-2014-2270

CVSS score4.3 MEDIUM

EPSS probability4.32%

CISA KEVNot currently listed

Published2014-03-14

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

security@debian.org — Broken Link, Patch
security@debian.org — Mailing List, Third Party Advisory
security@debian.org — Mailing List, Third Party Advisory
security@debian.org — Mailing List, Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Release Notes, Vendor Advisory
security@debian.org — Third Party Advisory