DEBIAN-CVE-2013-7345

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2013-7345
Published: 24 Mar 2014, 16:31
Last modified:28 Apr 2026, 20:10

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Mar 2014, 16:31
Published
Vulnerability first disclosed
28 Apr 2026, 20:10
Last Modified
Vulnerability information updated

Description

The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.

Affected Systems

  • debian•file

    < 1:5.17-0.1 | < 1:5.17-0.1 | < 1:5.17-0.1 | < 1:5.17-0.1

References (1)