CVE-2014-2270: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 4.3% chance of exploitation in the next 30 days.

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 12.10 only; version 13.10 only
• Debian Debian Linux: version 6.0 only; version 7.0 only; version 8.0 only
• File Project File: before 5.17 (fixed in 5.17)
• Opensuse Opensuse: version 11.4 only; version 12.3 only; version 13.1 only
• PHP PHP: before 5.4.26 (fixed in 5.4.26); from 5.5.0, before 5.5.10 (fixed in 5.5.10)

Published 2014-03-14. Last modified 2026-06-17.