Bug 1079846 (CVE-2013-7345)
| Summary: | CVE-2013-7345 file: extensive backtracking in awk rule regular expression | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Murray McAllister <mmcallis> | ||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
| Status: | CLOSED ERRATA | QA Contact: | |||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | unspecified | CC: | carnil, dkutalek, drieden, fedora, harald, jkaluza, jkurik, jorton, jrusnack, kwizart, mmaslano, mmcgrath, nobody+bgollahe, packaging-team-maint, pfrields, pmatilai, rcollet, thoger, vdanen, webstack-team | ||||
| Target Milestone: | --- | Keywords: | Security | ||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: |
A denial of service flaw was found in the File Information (fileinfo) extension rules for detecting AWK files. A remote attacker could use this flaw to cause a PHP application using fileinfo to consume an excessive amount of CPU.
|
Story Points: | --- | ||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2014-10-31 09:20:03 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | 1079847, 1079848, 1080180, 1080181, 1083712, 1120981, 1149768 | ||||||
| Bug Blocks: | 1065838, 1079850, 1149858 | ||||||
| Attachments: |
|
||||||
|
Description
Murray McAllister
2014-03-24 06:45:43 UTC
Created file tracking bugs for this issue: Affects: fedora-all [bug 1079847] Relevant regular expression check for AWK file type was introduced via the following commit: https://github.com/file/file/commit/e6b4015#diff-632ed2944e6b92e4b16ae8447f4f6e66 It first appeared in version 5.05. Created attachment 878158 [details] Regression fix from Debian packages Debian released updated advisory DSA 2873-2 that corrects regression introduced by the fix for this issue. Certain perl files with BEGIN are detected as awk scripts after the fix. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742265 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742262 Debian security update lowers strength of the awk regex rule. Reportedly, this upstream fix addresses the problem too: https://github.com/file/file/commit/afe6b9f http://bugs.gw.com/view.php?id=333 Created php tracking bugs for this issue: Affects: fedora-all [bug 1080181] Statement: This issue did not affect the versions of file as shipped with Red Hat Enterprise Linux 5, 6, and 7, the versions of php as shipped with Red Hat Enterprise Linux 5 and 6, and the versions of php53 as shipped with Red Hat Enterprise Linux 5. Upstream PHP patch: http://git.php.net/?p=php-src.git;a=commit;h=4374a52e9d13c480b4620c80a48591c6f883664b file-5.14-20.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report. php-5.5.11-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. php-5.5.11-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report. IssueDescription: A denial of service flaw was found in the File Information (fileinfo) extension rules for detecting AWK files. A remote attacker could use this flaw to cause a PHP application using fileinfo to consume an excessive amount of CPU. This issue has been addressed in following products: Red Hat Enterprise Linux 7 Via RHSA-2014:1013 https://rhn.redhat.com/errata/RHSA-2014-1013.html This issue has been addressed in the following products: Red Hat Software Collections 1 for Red Hat Enterprise Linux 7 Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS Red Hat Software Collections 1 for Red Hat Enterprise Linux 6 Via RHSA-2014:1765 https://rhn.redhat.com/errata/RHSA-2014-1765.html |