https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:00:15.363889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4374 ALSA-2021:4374 — Moderate: file security update 2026-10-03T09:00:15.374425+00:00

Affected: AlmaLinux:8: file, AlmaLinux:8: file-devel, AlmaLinux:8: file-libs, AlmaLinux:8: python3-magic

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-01768 bdu:2020-01768 2026-10-03T09:00:15.374485+00:00 bdu:2020-01768 https://cve.radiocsirt.org/vuln/bell-cve-2019-18218 Withdrawn: BELL-CVE-2019-18218 — CVE-2019-18218 does not affect BellSoft software 2026-10-03T09:00:15.374502+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2023-rs81674 CLEANSTART-2023-RS81674 — cdf_read_property_info in cdf 2026-10-03T09:00:15.374517+00:00

Affected: CleanStart: file

Security vulnerability affects the file package. cdf_read_property_info in cdf.

 https://cve.radiocsirt.org/vuln/cnvd-2020-14286 cnvd-2020-14286 2026-10-03T09:00:15.374535+00:00 cnvd-2020-14286 https://cve.radiocsirt.org/vuln/euvd-2026-58578 EUVD-2026-58578 2026-10-03T09:00:15.374548+00:00 EUVD-2026-58578 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18218 fkie_cve-2019-18218 2026-10-03T09:00:15.374558+00:00

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

 https://cve.radiocsirt.org/vuln/ghsa-gg3j-j3hx-hjx5 GHSA-gg3j-j3hx-hjx5 2026-10-03T09:00:15.374576+00:00

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

 https://cve.radiocsirt.org/vuln/gsd-2019-18218 gsd-2019-18218 2026-10-03T09:00:15.374589+00:00 gsd-2019-18218 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0677-1 openSUSE-SU-2020:0677-1 — Security update for file 2026-10-03T09:00:15.374599+00:00

Security update for file

 https://cve.radiocsirt.org/vuln/suse-su-2020:1294-1 SUSE-SU-2020:1294-1 — Security update for file 2026-10-03T09:00:15.374613+00:00

Security update for file

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18218 UBUNTU-CVE-2019-18218 2026-10-03T09:00:15.374626+00:00

Affected: Ubuntu:Pro:14.04:LTS: file, Ubuntu:16.04:LTS: file, Ubuntu:18.04:LTS: file

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0571 WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T09:00:15.374646+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.