CVE-2013-7345

Description

The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.

CVSS Metrics

• v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 1.13%• Percentile: 79%

Affected Systems

• christos_zoulas•file

  < 5.15

• debian•debian_linux

  6.0 | 7.0 | 8.0

• Unknown•PHP

  ≥ 5.4.0, < 5.4.27 | ≥ 5.5.0, < 5.5.11

References (6)

• https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993
• http://bugs.gw.com/view.php?id=164
• http://support.apple.com/kb/HT6443
• http://rhn.redhat.com/errata/RHSA-2014-1765.html
• http://www.debian.org/security/2014/dsa-2873