Search for packages
Package details: pkg:deb/debian/file@5.04-5%2Bsqueeze5
purl pkg:deb/debian/file@5.04-5%2Bsqueeze5
Next non-vulnerable version 1:5.39-3+deb11u1
Latest non-vulnerable version 1:5.39-3+deb11u1
Risk 4.0
Vulnerabilities affecting this package (30)
Vulnerability Summary Fixed by
VCID-15v8-18kg-g7ef
Aliases:
CVE-2019-18218
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-15y1-kds1-kbbu
Aliases:
CVE-2014-9620
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-1v2r-6smw-gqf3
Aliases:
CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-3m6c-ba8w-4bgv
Aliases:
CVE-2014-3587
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-4nqr-cqub-zkgk
Aliases:
CVE-2017-1000249
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-5t7f-sa76-kueh
Aliases:
CVE-2014-0238
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6ba2-28y2-2fby
Aliases:
CVE-2014-3538
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6saf-xd2z-67at
Aliases:
CVE-2014-2270
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-925b-2zzf-puf9
Aliases:
CVE-2014-9652
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-a928-66pg-jud1
Aliases:
CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-bgpz-gvmm-17gq
Aliases:
CVE-2012-1571
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
VCID-c1dz-dre4-vbdx
Aliases:
CVE-2014-3710
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-cx5s-cbdg-e7bj
Aliases:
CVE-2019-8904
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-evb9-14mt-mfcw
Aliases:
CVE-2014-3478
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jg88-vwqz-qua6
Aliases:
CVE-2014-9621
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jjex-w9bv-rfbm
Aliases:
CVE-2014-8116
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-m7up-51vh-w7gw
Aliases:
CVE-2014-8117
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-me9c-np98-cudr
Aliases:
CVE-2015-8865
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
VCID-ne9h-gdbn-83be
Aliases:
CVE-2013-7345
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-qc5e-hdy3-bqd8
Aliases:
CVE-2018-10360
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-qw1m-z63k-m7aq
Aliases:
CVE-2014-3487
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-r7xb-894d-1ba1
Aliases:
CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-rbsu-tvae-rqby
Aliases:
CVE-2014-3480
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-rbxv-29fe-6yaq
Aliases:
CVE-2014-3479
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-t2kg-9t3x-qqgx
Aliases:
CVE-2014-0237
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-vs63-5t1d-u7b9
Aliases:
CVE-2014-0207
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xam7-y8mv-kbab
Aliases:
CVE-2014-9653
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xjj3-egej-ybam
Aliases:
CVE-2014-0236
file: root_storage NULL pointer deference flaw in CDF parser
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xxwz-bq34-p3b1
Aliases:
CVE-2022-48554
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-ykmk-ya4d-6bhf
Aliases:
CVE-2014-1943
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-aepa-dpc7-qfcc file: heap-based buffer overflow in cdf_read_sat() CVE-2009-1515
VCID-tna1-z5pf-t7fg file: multiple memory corruption issues CVE-2009-0948
VCID-v3e9-dyw1-m7by CVE-2009-3930
VCID-vxt4-cwyy-9qda CVE-2009-2830
VCID-xyur-axav-yfhm file: multiple memory corruption issues CVE-2009-0947

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:14:11.235198+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:13:29.591605+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:12:24.009106+00:00 Debian Oval Importer Affected by VCID-me9c-np98-cudr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:03:16.533206+00:00 Debian Oval Importer Fixing VCID-aepa-dpc7-qfcc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:46:16.095109+00:00 Debian Oval Importer Affected by VCID-qc5e-hdy3-bqd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:59.501509+00:00 Debian Oval Importer Affected by VCID-bgpz-gvmm-17gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:18.923029+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:01:23.265913+00:00 Debian Oval Importer Affected by VCID-jg88-vwqz-qua6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:59:40.625688+00:00 Debian Oval Importer Affected by VCID-1v2r-6smw-gqf3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:57:33.866052+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:52:10.243999+00:00 Debian Oval Importer Fixing VCID-vxt4-cwyy-9qda https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:51:39.090870+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:39:16.541661+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:18:42.619367+00:00 Debian Oval Importer Affected by VCID-xjj3-egej-ybam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:02:41.653405+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:55:28.559162+00:00 Debian Oval Importer Fixing VCID-xyur-axav-yfhm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:46:29.960288+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:42:17.841994+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:32:55.535520+00:00 Debian Oval Importer Fixing VCID-v3e9-dyw1-m7by https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:13:46.171993+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:12:52.281515+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:35:48.098178+00:00 Debian Oval Importer Fixing VCID-tna1-z5pf-t7fg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:32:00.862021+00:00 Debian Oval Importer Affected by VCID-a928-66pg-jud1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:28:11.964543+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:22:37.399853+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:21:55.795591+00:00 Debian Oval Importer Affected by VCID-cx5s-cbdg-e7bj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:26:47.369317+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:49:23.356193+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:42:49.208412+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:25:16.039450+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:06:52.158485+00:00 Debian Oval Importer Affected by VCID-xxwz-bq34-p3b1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:59:09.349515+00:00 Debian Oval Importer Affected by VCID-r7xb-894d-1ba1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:50:02.747738+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:07:09.579004+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:48:50.111709+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:19:42.198098+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:05:45.582084+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:46:21.342253+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T09:45:38.869134+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:44:54.885558+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:42:03.450762+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:37.195776+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:18.652118+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:31:05.119538+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:45.425430+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:40.461597+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:34.728710+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:20.522430+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:28:48.572621+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:54.399276+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:24.468634+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:10.072832+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:25:51.314283+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:22:26.349744+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:20:56.206749+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:19:16.838688+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0