CVE-2013-1438

2014-01-1918:02:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

46.5%

JSON

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.

OSVersionArchitecturePackageVersionFilename
Debian12alldarktable< 1.2.2-2darktable_1.2.2-2_all.deb
Debian11alldarktable< 1.2.2-2darktable_1.2.2-2_all.deb
Debian10alldarktable< 1.2.2-2darktable_1.2.2-2_all.deb
Debian999alldarktable< 1.2.2-2darktable_1.2.2-2_all.deb
Debian13alldarktable< 1.2.2-2darktable_1.2.2-2_all.deb
Debian12alldcraw< 9.28-1dcraw_9.28-1_all.deb
Debian11alldcraw< 9.28-1dcraw_9.28-1_all.deb
Debian10alldcraw< 9.28-1dcraw_9.28-1_all.deb
Debian999alldcraw< 9.28-1dcraw_9.28-1_all.deb
Debian13alldcraw< 9.28-1dcraw_9.28-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	darktable	< 1.2.2-2	darktable_1.2.2-2_all.deb
Debian	11	all	darktable	< 1.2.2-2	darktable_1.2.2-2_all.deb
Debian	10	all	darktable	< 1.2.2-2	darktable_1.2.2-2_all.deb
Debian	999	all	darktable	< 1.2.2-2	darktable_1.2.2-2_all.deb
Debian	13	all	darktable	< 1.2.2-2	darktable_1.2.2-2_all.deb
Debian	12	all	dcraw	< 9.28-1	dcraw_9.28-1_all.deb
Debian	11	all	dcraw	< 9.28-1	dcraw_9.28-1_all.deb
Debian	10	all	dcraw	< 9.28-1	dcraw_9.28-1_all.deb
Debian	999	all	dcraw	< 9.28-1	dcraw_9.28-1_all.deb
Debian	13	all	dcraw	< 9.28-1	dcraw_9.28-1_all.deb