CVE-2014-8116: Canonical Ubuntu Linux

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 14.04 only; version 14.10 only
• File Project File: version 5.20 only
• Freebsd Freebsd: any version
• Mageia Mageia: version 4.0 only

Published 2014-12-17. Last modified 2026-06-17.