CVE-2019-8906

Published: 18 February 2019

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

Priority

CVSS 3 base score: 4.4

Status

Package	Release	Status
file Launchpad, Ubuntu, Debian	bionic	Released (1:5.32-2ubuntu0.2)
	cosmic	Released (1:5.34-2ubuntu0.1)
	precise	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Released (1:5.35-3)
	xenial	Not vulnerable (code not present)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.