The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9621