mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 13:31:34 +02:00
19 lines
874 B
Markdown
19 lines
874 B
Markdown
### [CVE-2013-7345](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7345)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/Live-Hack-CVE/CVE-2013-7345
|
|
- https://github.com/Live-Hack-CVE/CVE-2014-3538
|
|
|