{"schema_version":"1.7.5","id":"CVE-2017-1000249","published":"2017-09-11T19:29:00.200Z","modified":"2026-07-08T15:10:07.937237Z","related":["openSUSE-SU-2024:10755-1"],"details":"An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/file/file","events":[{"introduced":"015b0cdce1a0abb68ab99510e7fc8d2f77e8ec77"},{"last_affected":"015b0cdce1a0abb68ab99510e7fc8d2f77e8ec77"},{"fixed":"35c94dc6acc418f1ad7f6241a6680e5327495793"},{"fixed":"9611f31313a93aa036389c5f3b15eea53510d4d"}],"database_specific":{"cpe":"cpe:2.3:a:file_project:file:5.29:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.29"},{"last_affected":"5.29"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["5.29","FILE5_31","FILE5_30","FILE5_29"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000249.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["191730419508807807995728450003017890109","255685428453647614123441016389726967408","165778089394274387787587373511134378635","332407869254594291647053825146415379105","330899916478574045905968768894139584839","158136468176192798324936030520550183940","193169790860533737710285639127229560049"],"threshold":0.9},"id":"CVE-2017-1000249-fd5cd05d","signature_type":"Line","signature_version":"v1","source":"https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793","target":{"file":"src/readelf.c"}}],"vanir_signatures_modified":"2026-07-08T15:10:07Z"}}],"references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2017/dsa-3965"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201710-02"},{"type":"FIX","url":"https://github.com/file/file/commit/35c94dc6acc418f1ad7f6241a6680e5327495793"},{"type":"FIX","url":"https://github.com/file/file/commit/9611f31313a93aa036389c5f3b15eea53510d4d"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}]}