Search for packages
Package details: pkg:deb/debian/file@1:5.39-3%2Bdeb11u1
purl pkg:deb/debian/file@1:5.39-3%2Bdeb11u1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-15v8-18kg-g7ef cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write). CVE-2019-18218
VCID-xxwz-bq34-p3b1 File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project. CVE-2022-48554

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T13:06:52.198431+00:00 Debian Oval Importer Fixing VCID-xxwz-bq34-p3b1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:48:50.149215+00:00 Debian Oval Importer Fixing VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0