Test ID:	1.3.6.1.4.1.25623.1.0.841901
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2278-1)
Summary:	The remote host is missing an update for the 'file' package(s) announced via the USN-2278-1 advisory.
Description:	Summary: The remote host is missing an update for the 'file' package(s) announced via the USN-2278-1 advisory. Vulnerability Insight: Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. An attacker could use this issue to cause file to consume resources, resulting in a denial of service. (CVE-2013-7345) Francisco Alonso discovered that file incorrectly handled certain CDF documents. A attacker could use this issue to cause file to hang or crash, resulting in a denial of service. (CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487) Jan Kaluza discovered that file did not properly restrict the amount of data read during regex searches. An attacker could use this issue to cause file to consume resources, resulting in a denial of service. (CVE-2014-3538) Affected Software/OS: 'file' package(s) on Ubuntu 10.04, Ubuntu 12.04, Ubuntu 13.10, Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7345 Debian Security Information: DSA-2873 (Google Search) http://www.debian.org/security/2014/dsa-2873 RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0207 59794 http://secunia.com/advisories/59794 59831 http://secunia.com/advisories/59831 68243 http://www.securityfocus.com/bid/68243 APPLE-SA-2015-04-08-2 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html DSA-2974 http://www.debian.org/security/2014/dsa-2974 DSA-3021 http://www.debian.org/security/2014/dsa-3021 HPSBUX03102 http://marc.info/?l=bugtraq&m=141017844705317&w=2 RHSA-2014:1765 RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html SSRT101681 [file] 20140612 file-5.19 is now available http://mx.gw.com/pipermail/file/2014/001553.html http://support.apple.com/kb/HT6443 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.php.net/ChangeLog-5.php https://bugs.php.net/bug.php?id=67326 https://bugzilla.redhat.com/show_bug.cgi?id=1091842 https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391 https://support.apple.com/HT204659 openSUSE-SU-2014:1236 http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html Common Vulnerability Exposure (CVE) ID: CVE-2014-3478 68239 http://www.securityfocus.com/bid/68239 RHSA-2014:1327 http://rhn.redhat.com/errata/RHSA-2014-1327.html https://bugs.php.net/bug.php?id=67410 https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 Common Vulnerability Exposure (CVE) ID: CVE-2014-3479 68241 http://www.securityfocus.com/bid/68241 https://bugs.php.net/bug.php?id=67411 https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 Common Vulnerability Exposure (CVE) ID: CVE-2014-3480 68238 http://www.securityfocus.com/bid/68238 https://bugs.php.net/bug.php?id=67412 https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382 Common Vulnerability Exposure (CVE) ID: CVE-2014-3487 68120 http://www.securityfocus.com/bid/68120 https://bugs.php.net/bug.php?id=67413 https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d Common Vulnerability Exposure (CVE) ID: CVE-2014-3538 BugTraq ID: 68348 http://www.securityfocus.com/bid/68348 Debian Security Information: DSA-3008 (Google Search) http://www.debian.org/security/2014/dsa-3008 Debian Security Information: DSA-3021 (Google Search) http://openwall.com/lists/oss-security/2014/06/30/7 RedHat Security Advisories: RHSA-2014:1327 RedHat Security Advisories: RHSA-2014:1766 RedHat Security Advisories: RHSA-2016:0760 http://rhn.redhat.com/errata/RHSA-2016-0760.html http://secunia.com/advisories/60696
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.