Lucene search
HistorySep 16, 2013 - 7:14 p.m.
CVE-2013-1439
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.9%
The “faster LJPEG decoder” in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
Affected configurations
Node
librawlibrawMatch0.13.0
ORlibrawlibrawMatch0.13.1
ORlibrawlibrawMatch0.13.2
ORlibrawlibrawMatch0.13.3
ORlibrawlibrawMatch0.13.4
ORlibrawlibrawMatch0.13.5
ORlibrawlibrawMatch0.13.6
ORlibrawlibrawMatch0.13.7
ORlibrawlibrawMatch0.13.8
ORlibrawlibrawMatch0.14.0
ORlibrawlibrawMatch0.14.1
ORlibrawlibrawMatch0.14.2
ORlibrawlibrawMatch0.14.3
ORlibrawlibrawMatch0.14.4
ORlibrawlibrawMatch0.14.5
ORlibrawlibrawMatch0.14.6
ORlibrawlibrawMatch0.14.7
ORlibrawlibrawMatch0.15.0
ORlibrawlibrawMatch0.15.1
ORlibrawlibrawMatch0.15.2
ORlibrawlibrawMatch0.15.3
Related
ubuntucve
ubuntucve
CVE-2013-1439
2013-09-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-09 09:13:18
debiancve
debiancve
CVE-2013-1439
2013-09-16 19:14:37
cve
cve
CVE-2013-1439
2013-09-16 19:14:37
prion
prion
Null pointer dereference
2013-09-16 19:14:00
cvelist
cvelist
CVE-2013-1439
2013-09-16 19:00:00
nessus
nessus
Fedora 19 : dcraw-9.19-4.fc19 (2013-22900)
2013-12-17 00:00:00
Fedora 19 : LibRaw-0.14.8-3.fc19.20120830git98d925 (2013-15562)
2013-09-10 00:00:00
Ubuntu 12.04 LTS : libkdcraw vulnerabilities (USN-1978-1)
2013-10-01 00:00:00
openvas
openvas
Ubuntu Update for libkdcraw USN-1978-1
2013-10-03 00:00:00
Fedora Update for ufraw FEDORA-2013-22924
2013-12-17 00:00:00
Fedora Update for dcraw FEDORA-2013-22900
2013-12-17 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: dcraw-9.19-4.fc19
2013-12-16 23:00:04
[SECURITY] Fedora 18 Update: dcraw-9.19-4.fc18
2013-12-16 23:04:59
[SECURITY] Fedora 20 Update: ufraw-0.19.2-10.fc20
2013-12-17 19:12:05
securityvulns
securityvulns
libraw / libKDCraw DoS
2013-10-01 00:00:00
[USN-1978-1] libKDcraw vulnerabilities
2013-10-01 00:00:00
mageia
mageia
Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439
2013-12-23 21:20:10
Updated libraw packages fix security vulnerabilities
2013-10-10 02:39:51
Updated darktable package fixes two vulnerabilities
2014-02-11 00:21:49
ubuntu
ubuntu
libKDcraw vulnerabilities
2013-09-30 00:00:00
LibRaw vulnerabilities
2013-09-23 00:00:00
gentoo
gentoo
LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-15 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.9%
Related for NVD:CVE-2013-1439