DEBIAN-CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

Information disclosure

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

Code injection

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

CVE-2015-8366

CVE-2015-8366 : In LibRaw, an array index error in the smal_decode_segment function prior to 0.17.1 can enable context-dependent attackers to trigger memory errors and possibly execute arbitrary code via index-related vectors. Several connected sources confirm the issue is tied to LibRaw before 0...

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

CVE-2015-8367

CVE-2015-8367 affects Libraw’s phase_one_correct function; Libraw before 0.17.1 can cause memory errors and may allow arbitrary code execution due to memory object initialization issues. The available connected advisories indicate fixes in Libraw 0.17.1 and later (e.g., upstream release notes, di...

imagemagick:ping_dng_fuzzer: Index-out-of-bounds in LibRaw::adobe_coeff

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5192423114539008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

imagemagick:ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sget4

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5697854828183552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sget4

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5641472930217984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed Report: https://oss-fuzz.com/testcase?key=5131755925536768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::scalecolorsloop LibRaw::scalecolo...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::adobe_coeff

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5684491775639552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

imagemagick:encoder_dng_fuzzer: Index-out-of-bounds in LibRaw::nikon_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5749104436576256 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5767123887980544 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::subtractblackinternal...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::crop_masked_pixels

Detailed Report: https://oss-fuzz.com/testcase?key=5673723677376512 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::cropmaskedpixels...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libkdcraw Multiple Vulnerabilities (NS-SA-2019-0068)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libkdcraw packages installed that are affected by multiple vulnerabilities: - LibRaw is vulnerable to stack-based buffer overflow in internal/dcrawcommon.cpp:quicktake100loadraw function when processing specially-crafted RA...