Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
file工具本地缓冲区溢出漏洞
Vulnerability Description
file(1)是一款查看文件类型的工具。 file(1)命令存在一个缓冲区溢出漏洞，本地攻击者可以利用这个漏洞以执行用户权限在系统上执行任意指令。 问题存在于readelf.c中的587行tryelf()函数的doshn()调用中： doshn(class， swap， fd， getu32(swap， elfhdr.e_shoff)， getu16(swap， elfhdr.e_shnum)， getu16(swap， elfhdr.e_shentsize)); doshn() 'elfhdr.e_sh
CVSS Information
N/A
Vulnerability Type
N/A