Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
file 权限许可和访问控制问题漏洞
Vulnerability Description
file是软件开发者Christos Zoulas所负责维护的一套用于类Unix系统下查看文件格式的工具。 file 5.14及之前版本中的magic/Magdir/commands中的awk脚本检测器中的BEGIN正则表达式中存在安全漏洞，该漏洞源于使用多个无限制重复的通配符。攻击者可借助特制的ASCII文件利用该漏洞造成拒绝服务（CPU消耗)。
CVSS Information
N/A
Vulnerability Type
N/A