Lucene search

K
mageiaGentoo FoundationMGASA-2015-0222
HistoryMay 13, 2015 - 8:18 p.m.

Updated darktable packages fix CVE-2015-3885

2015-05-1320:18:54
Gentoo Foundation
advisories.mageia.org
11

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.048 Low

EPSS

Percentile

92.8%

Updated darktable package fixes security vulnerability The dcraw tool bundled in darktable’s libraw copy suffers from an integer overflow condition which leads to a buffer overflow. A maliciously crafted raw image file can be used to trigger the vulnerability, causing a Denial of Service condition. The bundled dcraw code has been patched to fix this vulnerability.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchdarktable< 1.2.3-4.3darktable-1.2.3-4.3.mga4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.048 Low

EPSS

Percentile

92.8%