CVE ID:	CVE-2014-9653
Description:	readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2015.204   1.3.6.1.4.1.25623.1.0.703196   1.3.6.1.4.1.25623.1.0.122739
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9653 BugTraq ID: 72516 http://www.securityfocus.com/bid/72516 Debian Security Information: DSA-3196 (Google Search) http://www.debian.org/security/2015/dsa-3196 https://security.gentoo.org/glsa/201701-42 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 http://mx.gw.com/pipermail/file/2014/001649.html http://openwall.com/lists/oss-security/2015/02/05/13 RedHat Security Advisories: RHSA-2016:0760 http://rhn.redhat.com/errata/RHSA-2016-0760.html https://usn.ubuntu.com/3686-1/