ALPINE-CVE-2019-8907

Source
https://security.alpinelinux.org/vuln/CVE-2019-8907
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-8907.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2019-8907
Upstream
Published
2019-02-18T17:29:01Z
Modified
2025-09-30T05:16:43.626349Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

docorenote in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

References

Affected packages

Alpine:v3.10

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.11

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.12

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.13

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.14

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.15

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.16

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.17

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.18

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.19

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.20

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.21

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.22

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0

Alpine:v3.7

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.32-r1

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0

Alpine:v3.8

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.32-r1

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0

Alpine:v3.9

file

Package

Name
file
Purl
pkg:apk/alpine/file?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.36-r0

Affected versions

4.*

4.26-r1

5.*

5.00-r0
5.01-r0
5.03-r0
5.04-r0
5.04-r1
5.04-r2
5.05-r0
5.06-r0
5.07-r0
5.07-r1
5.08-r0
5.09-r0
5.09-r1
5.10-r0
5.11-r0
5.12-r0
5.14-r0
5.15-r0
5.16-r0
5.17-r0
5.18-r0
5.19-r0
5.19-r1
5.19-r2
5.20-r0
5.21-r0
5.22-r0
5.23-r0
5.24-r0
5.25-r0
5.25-r1
5.26-r0
5.27-r0
5.28-r0
5.30-r0
5.31-r0
5.31-r1
5.32-r0
5.33-r0
5.35-r0