Search for packages
Package details: pkg:deb/debian/file@5.11-2%2Bdeb7u8
purl pkg:deb/debian/file@5.11-2%2Bdeb7u8
Next non-vulnerable version 1:5.39-3+deb11u1
Latest non-vulnerable version 1:5.39-3+deb11u1
Risk 4.0
Vulnerabilities affecting this package (29)
Vulnerability Summary Fixed by
VCID-15v8-18kg-g7ef
Aliases:
CVE-2019-18218
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-15y1-kds1-kbbu
Aliases:
CVE-2014-9620
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-1v2r-6smw-gqf3
Aliases:
CVE-2019-8906
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-3m6c-ba8w-4bgv
Aliases:
CVE-2014-3587
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-4nqr-cqub-zkgk
Aliases:
CVE-2017-1000249
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-5t7f-sa76-kueh
Aliases:
CVE-2014-0238
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6ba2-28y2-2fby
Aliases:
CVE-2014-3538
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-6saf-xd2z-67at
Aliases:
CVE-2014-2270
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-925b-2zzf-puf9
Aliases:
CVE-2014-9652
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-a928-66pg-jud1
Aliases:
CVE-2019-8907
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-c1dz-dre4-vbdx
Aliases:
CVE-2014-3710
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-cx5s-cbdg-e7bj
Aliases:
CVE-2019-8904
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-evb9-14mt-mfcw
Aliases:
CVE-2014-3478
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jg88-vwqz-qua6
Aliases:
CVE-2014-9621
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-jjex-w9bv-rfbm
Aliases:
CVE-2014-8116
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-m7up-51vh-w7gw
Aliases:
CVE-2014-8117
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-me9c-np98-cudr
Aliases:
CVE-2015-8865
1:5.30-1+deb9u3
Affected by 8 other vulnerabilities.
VCID-ne9h-gdbn-83be
Aliases:
CVE-2013-7345
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-qc5e-hdy3-bqd8
Aliases:
CVE-2018-10360
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-qw1m-z63k-m7aq
Aliases:
CVE-2014-3487
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-r7xb-894d-1ba1
Aliases:
CVE-2019-8905
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
1:5.35-4+deb10u2
Affected by 2 other vulnerabilities.
VCID-rbsu-tvae-rqby
Aliases:
CVE-2014-3480
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-rbxv-29fe-6yaq
Aliases:
CVE-2014-3479
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-t2kg-9t3x-qqgx
Aliases:
CVE-2014-0237
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-vs63-5t1d-u7b9
Aliases:
CVE-2014-0207
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xam7-y8mv-kbab
Aliases:
CVE-2014-9653
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xjj3-egej-ybam
Aliases:
CVE-2014-0236
file: root_storage NULL pointer deference flaw in CDF parser
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
VCID-xxwz-bq34-p3b1
Aliases:
CVE-2022-48554
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
1:5.39-3+deb11u1
Affected by 0 other vulnerabilities.
VCID-ykmk-ya4d-6bhf
Aliases:
CVE-2014-1943
1:5.22+15-2~bpo7+1
Affected by 9 other vulnerabilities.
Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:14:11.244187+00:00 Debian Oval Importer Affected by VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:13:29.600979+00:00 Debian Oval Importer Affected by VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T20:12:24.019329+00:00 Debian Oval Importer Affected by VCID-me9c-np98-cudr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:46:16.105114+00:00 Debian Oval Importer Affected by VCID-qc5e-hdy3-bqd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:59.511247+00:00 Debian Oval Importer Fixing VCID-bgpz-gvmm-17gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:18.931944+00:00 Debian Oval Importer Affected by VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:01:23.275329+00:00 Debian Oval Importer Affected by VCID-jg88-vwqz-qua6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:59:40.635087+00:00 Debian Oval Importer Affected by VCID-1v2r-6smw-gqf3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:57:33.875215+00:00 Debian Oval Importer Affected by VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:51:39.099550+00:00 Debian Oval Importer Affected by VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:39:16.550563+00:00 Debian Oval Importer Affected by VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:18:42.628565+00:00 Debian Oval Importer Affected by VCID-xjj3-egej-ybam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:02:41.662010+00:00 Debian Oval Importer Affected by VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:46:29.969308+00:00 Debian Oval Importer Affected by VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:42:17.851088+00:00 Debian Oval Importer Affected by VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:13:46.181031+00:00 Debian Oval Importer Affected by VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:12:52.290582+00:00 Debian Oval Importer Affected by VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:32:00.870968+00:00 Debian Oval Importer Affected by VCID-a928-66pg-jud1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:28:11.973031+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:22:37.408666+00:00 Debian Oval Importer Affected by VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:21:55.804970+00:00 Debian Oval Importer Affected by VCID-cx5s-cbdg-e7bj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:26:47.378054+00:00 Debian Oval Importer Affected by VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:49:23.365523+00:00 Debian Oval Importer Affected by VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:42:49.217810+00:00 Debian Oval Importer Affected by VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:25:16.049028+00:00 Debian Oval Importer Affected by VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:06:52.168501+00:00 Debian Oval Importer Affected by VCID-xxwz-bq34-p3b1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:59:09.358981+00:00 Debian Oval Importer Affected by VCID-r7xb-894d-1ba1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:50:02.757077+00:00 Debian Oval Importer Affected by VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:07:09.588555+00:00 Debian Oval Importer Affected by VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:48:50.120582+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:19:42.206404+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:05:45.592151+00:00 Debian Oval Importer Affected by VCID-4nqr-cqub-zkgk https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:46:21.352074+00:00 Debian Oval Importer Affected by VCID-15v8-18kg-g7ef https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T09:45:38.878259+00:00 Debian Oval Importer Fixing VCID-5t7f-sa76-kueh https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:44:54.894780+00:00 Debian Oval Importer Fixing VCID-jjex-w9bv-rfbm https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:42:03.460719+00:00 Debian Oval Importer Fixing VCID-rbxv-29fe-6yaq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:37.205028+00:00 Debian Oval Importer Fixing VCID-xam7-y8mv-kbab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:37:18.661326+00:00 Debian Oval Importer Fixing VCID-c1dz-dre4-vbdx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:31:05.128768+00:00 Debian Oval Importer Fixing VCID-3m6c-ba8w-4bgv https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:45.434623+00:00 Debian Oval Importer Fixing VCID-ykmk-ya4d-6bhf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:40.471494+00:00 Debian Oval Importer Fixing VCID-925b-2zzf-puf9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:34.738418+00:00 Debian Oval Importer Fixing VCID-6ba2-28y2-2fby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:29:20.532184+00:00 Debian Oval Importer Fixing VCID-6saf-xd2z-67at https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:28:48.582325+00:00 Debian Oval Importer Fixing VCID-rbsu-tvae-rqby https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:54.410457+00:00 Debian Oval Importer Fixing VCID-qw1m-z63k-m7aq https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:24.477838+00:00 Debian Oval Importer Fixing VCID-m7up-51vh-w7gw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:27:10.082309+00:00 Debian Oval Importer Fixing VCID-vs63-5t1d-u7b9 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:25:51.323729+00:00 Debian Oval Importer Fixing VCID-15y1-kds1-kbbu https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:22:26.359133+00:00 Debian Oval Importer Fixing VCID-t2kg-9t3x-qqgx https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:20:56.215597+00:00 Debian Oval Importer Fixing VCID-evb9-14mt-mfcw https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0
2025-08-01T09:19:16.849627+00:00 Debian Oval Importer Fixing VCID-ne9h-gdbn-83be https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 37.0.0