CVE:CVE-2019-8906
CNNVD:CNNVD-201902-710
file是一套使用在类Unix中的、用于查看文件信息的命令行工具。
file 5.35版本中的libmagic.a静态链接库的readelf.c文件的do_core_note存在越界读取漏洞，该漏洞源于程度没有正确地使用内存拷贝函数。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade file_project file to a higher version than 5.35,and avoid the version 5.35; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3; Upgrade apple iphone_os to a higher version than 12.2,and avoid the version (,12.2); Upgrade apple mac_os_x to a higher version than 10.14.4,and avoid the version (,10.14.4); Upgrade apple tvos to a higher version than 12.2,and avoid the version (,12.2); Upgrade apple watchos to a higher version than 5.2,and avoid the version (,5.2)