Lucene search
Gentoo FoundationGLSA-201309-09HistorySep 15, 2013 - 12:00 a.m.
LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-1500:00:00
Gentoo Foundation
security.gentoo.org
13
0.005 Low
EPSS
Percentile
77.3%
Background
LibRaw is a library for reading RAW files obtained from digital photo cameras. libkdcraw is a wrapper for LibRaw within KDE.
Description
Multiple vulnerabilities have been discovered in LibRaw and libkdcraw. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker could entice a user to open a specially crafted file, possibly resulting in arbitrary code execution or Denial of Service.
Workaround
There is no known workaround at this time.
Resolution
All LibRaw users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libraw-0.15.4"
All libkdcraw users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=kde-base/libkdcraw-4.10.5-r1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | media-libs/libraw | < 0.15.4 | UNKNOWN |
| Gentoo | any | all | kde-base/libkdcraw | < 4.10.5-r1 | UNKNOWN |
Related
nessus
nessus
GLSA-201309-09 : LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-15 00:00:00
Mandriva Linux Security Advisory : libraw (MDVSA-2013:249)
2013-10-11 00:00:00
Fedora 20 : dcraw-9.19-4.fc20 (2013-22854)
2013-12-18 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201309-09
2015-09-29 00:00:00
Fedora Update for LibRaw FEDORA-2013-15576
2013-09-12 00:00:00
Fedora Update for LibRaw FEDORA-2013-15576
2013-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: LibRaw-0.14.8-3.fc18.20120830git98d925
2013-09-09 23:59:19
[SECURITY] Fedora 19 Update: ufraw-0.19.2-10.fc19
2013-12-16 23:02:21
[SECURITY] Fedora 19 Update: LibRaw-0.14.8-3.fc19.20120830git98d925
2013-09-09 23:50:03
mageia
mageia
Updated libraw packages fix security vulnerabilities
2013-10-10 02:39:51
Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439
2013-12-23 21:20:10
Updated darktable package fixes two vulnerabilities
2014-02-11 00:21:49
ubuntu
ubuntu
LibRaw vulnerabilities
2013-09-23 00:00:00
libKDcraw vulnerabilities
2013-09-30 00:00:00
securityvulns
securityvulns
libraw / libKDCraw DoS
2013-10-01 00:00:00
[USN-1978-1] libKDcraw vulnerabilities
2013-10-01 00:00:00
[SECURITY] [DSA 2748-1] exactimage security update
2013-09-09 00:00:00
cve
cve
prion
prion
Null pointer dereference
2013-09-16 19:14:00
Buffer overflow
2013-08-14 15:55:00
Null pointer dereference
2014-01-19 18:02:00
cvelist
cvelist
ubuntucve
ubuntucve
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2022-11-09 09:13:18
Denial Of Service (DoS)
2022-11-09 08:37:09
osv
osv
exactimage - denial of service
2013-09-10 00:00:00
exactimage - denial of service
2013-09-01 00:00:00
debian
debian
[SECURITY] [DSA 2748-1] exactimage security update
2013-09-01 10:23:02