CVE:CVE-2014-8116
CNNVD:CNNVD-201412-379
file是软件开发者Christos Zoulas所负责维护的一套用于类Unix系统下查看文件格式的工具。
file 5.21之前版本的ELF解析器(readelf.c)中存在安全漏洞。远程攻击者可借助大量的‘program’或‘section ’头或无效的功能利用该漏洞造成拒绝服务（CPU消耗或崩溃）。
solution:Upgrade file_project file to a higher version than 5.20,and avoid the version 5.20; Upgrade freebsd freebsd to a higher version than *; Upgrade mageia mageia to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10