Search for packages
Package details: pkg:deb/debian/file@4.17-5etch1
purl pkg:deb/debian/file@4.17-5etch1
Next non-vulnerable version 1:5.39-3+deb11u1
Latest non-vulnerable version 1:5.39-3+deb11u1
Risk 4.4
Vulnerabilities affecting this package (38)
Vulnerability Summary Fixed by
VCID-15v8-18kg-g7ef
Aliases:
CVE-2019-18218
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-15y1-kds1-kbbu
Aliases:
CVE-2014-9620
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-1v2r-6smw-gqf3
Aliases:
CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-3m6c-ba8w-4bgv
Aliases:
CVE-2014-3587
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-4nqr-cqub-zkgk
Aliases:
CVE-2017-1000249
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-5t7f-sa76-kueh
Aliases:
CVE-2014-0238
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-62x2-hjtp-3qem
Aliases:
CVE-2007-2799
4.26-1
Affected by 35 other vulnerabilities.
VCID-6ba2-28y2-2fby
Aliases:
CVE-2014-3538
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6saf-xd2z-67at
Aliases:
CVE-2014-2270
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-925b-2zzf-puf9
Aliases:
CVE-2014-9652
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-a928-66pg-jud1
Aliases:
CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-aepa-dpc7-qfcc
Aliases:
CVE-2009-1515
file: heap-based buffer overflow in cdf_read_sat()
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-bgpz-gvmm-17gq
Aliases:
CVE-2012-1571
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
VCID-c1dz-dre4-vbdx
Aliases:
CVE-2014-3710
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-cx5s-cbdg-e7bj
Aliases:
CVE-2019-8904
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-evb9-14mt-mfcw
Aliases:
CVE-2014-3478
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jg88-vwqz-qua6
Aliases:
CVE-2014-9621
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jjex-w9bv-rfbm
Aliases:
CVE-2014-8116
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-m7up-51vh-w7gw
Aliases:
CVE-2014-8117
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-me9c-np98-cudr
Aliases:
CVE-2015-8865
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
VCID-ne9h-gdbn-83be
Aliases:
CVE-2013-7345
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-qc5e-hdy3-bqd8
Aliases:
CVE-2018-10360
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-qw1m-z63k-m7aq
Aliases:
CVE-2014-3487
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-r7xb-894d-1ba1
Aliases:
CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-rbsu-tvae-rqby
Aliases:
CVE-2014-3480
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-rbxv-29fe-6yaq
Aliases:
CVE-2014-3479
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-t2kg-9t3x-qqgx
Aliases:
CVE-2014-0237
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-tna1-z5pf-t7fg
Aliases:
CVE-2009-0948
file: multiple memory corruption issues
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-uzbb-4zp5-pkh3
Aliases:
CVE-2007-1536
4.26-1
Affected by 35 other vulnerabilities.
VCID-v3e9-dyw1-m7by
Aliases:
CVE-2009-3930
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-vs63-5t1d-u7b9
Aliases:
CVE-2014-0207
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-vxt4-cwyy-9qda
Aliases:
CVE-2009-2830
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-wfe7-9d8n-vkh3
Aliases:
CVE-2007-2026
4.26-1
Affected by 35 other vulnerabilities.
VCID-xam7-y8mv-kbab
Aliases:
CVE-2014-9653
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xjj3-egej-ybam
Aliases:
CVE-2014-0236
file: root_storage NULL pointer deference flaw in CDF parser
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xxwz-bq34-p3b1
Aliases:
CVE-2022-48554
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-xyur-axav-yfhm
Aliases:
CVE-2009-0947
file: multiple memory corruption issues
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-ykmk-ya4d-6bhf
Aliases:
CVE-2014-1943
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:14:11.222370+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:13:29.578556+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:12:23.993771+00:00 Debian Oval Importer Affected by VCID-me9c-np98-cudr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:03:16.518309+00:00 Debian Oval Importer Affected by VCID-aepa-dpc7-qfcc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:46:16.080213+00:00 Debian Oval Importer Affected by VCID-qc5e-hdy3-bqd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:59.487161+00:00 Debian Oval Importer Affected by VCID-bgpz-gvmm-17gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:18.910120+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:01:23.251627+00:00 Debian Oval Importer Affected by VCID-jg88-vwqz-qua6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:59:40.611471+00:00 Debian Oval Importer Affected by VCID-1v2r-6smw-gqf3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:57:33.852868+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:52:10.229180+00:00 Debian Oval Importer Affected by VCID-vxt4-cwyy-9qda https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:51:39.078688+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:39:16.529324+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:18:42.605575+00:00 Debian Oval Importer Affected by VCID-xjj3-egej-ybam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:02:41.641204+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:55:28.545711+00:00 Debian Oval Importer Affected by VCID-xyur-axav-yfhm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:46:29.947489+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:42:17.829099+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:32:55.522074+00:00 Debian Oval Importer Affected by VCID-v3e9-dyw1-m7by https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:13:46.159248+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:12:52.269188+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:10:38.539590+00:00 Debian Oval Importer Affected by VCID-wfe7-9d8n-vkh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:35:48.083803+00:00 Debian Oval Importer Affected by VCID-tna1-z5pf-t7fg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:32:00.848487+00:00 Debian Oval Importer Affected by VCID-a928-66pg-jud1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:28:11.952183+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:22:37.387143+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:21:55.782006+00:00 Debian Oval Importer Affected by VCID-cx5s-cbdg-e7bj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:37:18.817928+00:00 Debian Oval Importer Affected by VCID-62x2-hjtp-3qem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:26:47.356587+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:49:23.343024+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:42:49.195089+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:25:16.025993+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:06:52.143476+00:00 Debian Oval Importer Affected by VCID-xxwz-bq34-p3b1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:59:09.335165+00:00 Debian Oval Importer Affected by VCID-r7xb-894d-1ba1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:50:02.734737+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:47:24.598079+00:00 Debian Oval Importer Affected by VCID-uzbb-4zp5-pkh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:07:09.563872+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:48:50.098570+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:19:42.185560+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:05:45.567854+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:46:21.327858+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T09:45:38.855242+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:44:54.871758+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:42:03.436177+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:37.181962+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:18.638442+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:31:05.105699+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:45.411697+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:40.446790+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:34.715230+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:20.508076+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:28:48.558411+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:54.381908+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:24.454667+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:10.058490+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:25:51.300263+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:22:26.336143+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:20:56.193291+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:19:16.822535+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0