GLSA-202312-08 : LibRaw: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202312-08 LibRaw: Heap Buffer Overflow - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash. CVE-2023-1729 Note that Nessus has not tested for th...

Slackware Linux 15.0 / current LibRaw Multiple Vulnerabilities (SSA:2023-295-01)

The version of LibRaw installed on the remote host is prior to 0.20.2 / 0.21.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-295-01 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the...

[SECURITY] [DSA 5412-1] libraw security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 27, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3433-1] libraw security update

Debian LTS Advisory DLA-3433-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 27, 2023 https://wiki.debian.org/LTS Package : libraw Version : 0.19.2-2+deb10u3 CVE ID : CVE-2021-32142 CVE-2023-1729 Debian Bug : 1031790 1036281 Buffer Overflow vulnerabilities we...

Debian dla-3433 : libraw-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3433 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3433-1 [email protected]...

Fedora 38 : mingw-LibRaw (2023-b19f236bc7)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b19f236bc7 advisory. Backport fix for CVE-2023-1729. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : mingw-LibRaw (2023-88c87f6191)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-88c87f6191 advisory. Backport fix for CVE-2023-1729. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2023-1729

creationtimestamp| type| source ---|---|--- 2023-05-16 02:29:54+00:00| seen| https://t.me/cibsecurity/64176...

SUSE SLED15: libraw-devel / libraw-devel-static / libraw-tools / libraw20 / etc (SUSE-SU-2023:2194-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2194-1 advisory. - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720. Tenable has extracted...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:2195-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2195-1 advisory. - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720. Tenable has extracted...

CVE-2023-1729

A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

SUSE-SU-2023:2196-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720...

SUSE-SU-2023:2195-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720...

SUSE-SU-2023:2194-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720...

CVE-2023-1729

A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

CVE-2023-1729

LibRaw (the RAW image decoding library) is affected by a heap-buffer-overflow in raw2image_ex() triggered by processing maliciously crafted files, which may cause an application crash. This CVE-2023-1729 is cited across multiple advisories (Debian, AlmaLinux, CNVD, etc.) and is confirmed by conne...

Amazon Linux AMI : curl (ALAS-2023-1729)

The version of curl installed on the remote host is prior to 7.61.1-12.104. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1729 advisory. A vulnerability was found in curl. In this issue, curl can be asked to tunnel all protocols virtually it supports throug...

K000132933: Linux kernel vulnerability CVE-2022-1729

Security Advisory Description A race condition was found the Linux kernel in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc. CVE-2022-1729...

K19384335: SmallRye's API vulnerability CVE-2020-1729

Security Advisory Description A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this...

SUSE CVE-2006-1729

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by 1 inserting the target filename into a text box, then turning that box into a file upload control, or 2 changing the type of the...