Search for packages
Package details: pkg:deb/debian/file@4.17-5etch3
purl pkg:deb/debian/file@4.17-5etch3
Next non-vulnerable version 1:5.39-3+deb11u1
Latest non-vulnerable version 1:5.39-3+deb11u1
Risk 4.4
Vulnerabilities affecting this package (38)
Vulnerability Summary Fixed by
VCID-15v8-18kg-g7ef
Aliases:
CVE-2019-18218
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-15y1-kds1-kbbu
Aliases:
CVE-2014-9620
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-1v2r-6smw-gqf3
Aliases:
CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-3m6c-ba8w-4bgv
Aliases:
CVE-2014-3587
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-4nqr-cqub-zkgk
Aliases:
CVE-2017-1000249
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-5t7f-sa76-kueh
Aliases:
CVE-2014-0238
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-62x2-hjtp-3qem
Aliases:
CVE-2007-2799
4.26-1
Affected by 35 other vulnerabilities.
VCID-6ba2-28y2-2fby
Aliases:
CVE-2014-3538
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6saf-xd2z-67at
Aliases:
CVE-2014-2270
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-925b-2zzf-puf9
Aliases:
CVE-2014-9652
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-a928-66pg-jud1
Aliases:
CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-aepa-dpc7-qfcc
Aliases:
CVE-2009-1515
file: heap-based buffer overflow in cdf_read_sat()
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-bgpz-gvmm-17gq
Aliases:
CVE-2012-1571
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
VCID-c1dz-dre4-vbdx
Aliases:
CVE-2014-3710
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-cx5s-cbdg-e7bj
Aliases:
CVE-2019-8904
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-evb9-14mt-mfcw
Aliases:
CVE-2014-3478
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jg88-vwqz-qua6
Aliases:
CVE-2014-9621
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jjex-w9bv-rfbm
Aliases:
CVE-2014-8116
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-m7up-51vh-w7gw
Aliases:
CVE-2014-8117
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-me9c-np98-cudr
Aliases:
CVE-2015-8865
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
VCID-ne9h-gdbn-83be
Aliases:
CVE-2013-7345
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-qc5e-hdy3-bqd8
Aliases:
CVE-2018-10360
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-qw1m-z63k-m7aq
Aliases:
CVE-2014-3487
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-r7xb-894d-1ba1
Aliases:
CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-rbsu-tvae-rqby
Aliases:
CVE-2014-3480
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-rbxv-29fe-6yaq
Aliases:
CVE-2014-3479
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-t2kg-9t3x-qqgx
Aliases:
CVE-2014-0237
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-tna1-z5pf-t7fg
Aliases:
CVE-2009-0948
file: multiple memory corruption issues
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-uzbb-4zp5-pkh3
Aliases:
CVE-2007-1536
4.26-1
Affected by 35 other vulnerabilities.
VCID-v3e9-dyw1-m7by
Aliases:
CVE-2009-3930
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-vs63-5t1d-u7b9
Aliases:
CVE-2014-0207
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-vxt4-cwyy-9qda
Aliases:
CVE-2009-2830
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-wfe7-9d8n-vkh3
Aliases:
CVE-2007-2026
4.26-1
Affected by 35 other vulnerabilities.
VCID-xam7-y8mv-kbab
Aliases:
CVE-2014-9653
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xjj3-egej-ybam
Aliases:
CVE-2014-0236
file: root_storage NULL pointer deference flaw in CDF parser
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xxwz-bq34-p3b1
Aliases:
CVE-2022-48554
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-xyur-axav-yfhm
Aliases:
CVE-2009-0947
file: multiple memory corruption issues
5.04-5+squeeze5
Affected by 30 other vulnerabilities.
VCID-ykmk-ya4d-6bhf
Aliases:
CVE-2014-1943
5.11-2+deb7u8
Affected by 29 other vulnerabilities.
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:14:11.226600+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:13:29.582737+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:12:23.998832+00:00 Debian Oval Importer Affected by VCID-me9c-np98-cudr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:03:16.523272+00:00 Debian Oval Importer Affected by VCID-aepa-dpc7-qfcc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:46:16.085102+00:00 Debian Oval Importer Affected by VCID-qc5e-hdy3-bqd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:59.491890+00:00 Debian Oval Importer Affected by VCID-bgpz-gvmm-17gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:18.914343+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:01:23.256365+00:00 Debian Oval Importer Affected by VCID-jg88-vwqz-qua6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:59:40.616161+00:00 Debian Oval Importer Affected by VCID-1v2r-6smw-gqf3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:57:33.857396+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:52:10.234022+00:00 Debian Oval Importer Affected by VCID-vxt4-cwyy-9qda https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:51:39.082771+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:39:16.533391+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:18:42.610134+00:00 Debian Oval Importer Affected by VCID-xjj3-egej-ybam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:02:41.645223+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:55:28.550186+00:00 Debian Oval Importer Affected by VCID-xyur-axav-yfhm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:46:29.951800+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:42:17.833325+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:32:55.526551+00:00 Debian Oval Importer Affected by VCID-v3e9-dyw1-m7by https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:13:46.163494+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:12:52.273298+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:10:38.544291+00:00 Debian Oval Importer Affected by VCID-wfe7-9d8n-vkh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:35:48.088642+00:00 Debian Oval Importer Affected by VCID-tna1-z5pf-t7fg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:32:00.853036+00:00 Debian Oval Importer Affected by VCID-a928-66pg-jud1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:28:11.956355+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:22:37.391416+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:21:55.786491+00:00 Debian Oval Importer Affected by VCID-cx5s-cbdg-e7bj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:37:18.822578+00:00 Debian Oval Importer Affected by VCID-62x2-hjtp-3qem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:26:47.360913+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:49:23.347370+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:42:49.199584+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:25:16.030537+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:06:52.148391+00:00 Debian Oval Importer Affected by VCID-xxwz-bq34-p3b1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:59:09.339962+00:00 Debian Oval Importer Affected by VCID-r7xb-894d-1ba1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:50:02.739215+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:47:24.603148+00:00 Debian Oval Importer Affected by VCID-uzbb-4zp5-pkh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:07:09.569232+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:48:50.103020+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:19:42.189762+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:05:45.572463+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:46:21.332743+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T09:45:38.859956+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:44:54.876382+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:42:03.440986+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:37.186541+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:18.642993+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:31:05.110177+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:45.416263+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:40.451978+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:34.719678+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:20.512777+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:28:48.563138+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:54.387570+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:24.459266+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:10.063263+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:25:51.305047+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:22:26.340696+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:20:56.197748+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:19:16.827809+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0