VDB

ALPINE-CVE-2019-8907

ALPINE-CVE-2019-8907 PUBLISHED CVSS 8.800000190734863 HIGH

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.

Risk Scores

CVSS 3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.24file0
Alpine:v3.14file5.07-r0, 5.33-r0, 5.30-r0
Alpine:v3.10file5.25-r0, 5.03-r0, 5.14-r0
Alpine:v3.18file4.26-r1, 5.11-r0, 5.06-r0
Alpine:v3.17file5.27-r0, 5.09-r0, 5.04-r1
Alpine:v3.20file5.26-r0, 5.00-r0, 5.01-r0
Alpine:v3.11file5.30-r0, 5.28-r0, 5.27-r0
Alpine:v3.15file5.04-r1, 5.01-r0, 0
Alpine:v3.12file5.01-r0, 5.03-r0, 5.04-r0
Alpine:v3.16file5.07-r0, 5.25-r0, 5.35-r0
Alpine:v3.13file5.15-r0, 5.07-r0, 5.19-r2
Alpine:v3.23file5.01-r0, 5.26-r0, 5.35-r0
Alpine:v3.8file4.26-r1, 5.01-r0, 5.04-r0
Alpine:v3.22file5.27-r0, 4.26-r1, 5.01-r0
Alpine:v3.21file5.01-r0, 5.03-r0, 4.26-r1
Alpine:v3.7file5.06-r0, 5.21-r0, 5.32-r0
Alpine:v3.9file5.01-r0, 5.04-r1, 4.26-r1
Alpine:v3.19file5.33-r0, 5.31-r1, 5.31-r0

Timeline

  • Feb 18, 2019 CVE Published
  • Jun 9, 2026 CVE Updated
  • Aug 8, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 50/day Open console ›