Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2013-7345
Description:The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.
Test IDs: 1.3.6.1.4.1.25623.1.0.123340   1.3.6.1.4.1.25623.1.1.1.2.2014.67   1.3.6.1.4.1.25623.1.0.703008   1.3.6.1.4.1.25623.1.1.13.2014.111.02   1.3.6.1.4.1.25623.1.1.10.2014.0324   1.3.6.1.4.1.25623.1.0.120475   1.3.6.1.4.1.25623.1.1.10.2014.0142   1.3.6.1.4.1.25623.1.0.120048   1.3.6.1.4.1.25623.1.1.10.2014.0307   1.3.6.1.4.1.25623.1.0.120047   1.3.6.1.4.1.25623.1.0.120476   1.3.6.1.4.1.25623.1.1.10.2014.0178   1.3.6.1.4.1.25623.1.0.121252   1.3.6.1.4.1.25623.1.0.120208  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-7345
Debian Security Information: DSA-2873 (Google Search)
http://www.debian.org/security/2014/dsa-2873
RedHat Security Advisories: RHSA-2014:1765
http://rhn.redhat.com/errata/RHSA-2014-1765.html




© 1998-2025 E-Soft Inc. All rights reserved.