Lucene search
+L

1864 matches found

securityvulns
securityvulns
added 2015/05/11 12:00 a.m.35 views

dcraw / libraw integer overflow

Integer overflow in ljpegstart...

3.4AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.15 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libraw package up to version 0.15.4 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS7.7AI score0.04534EPSS
SaveExploits3References9Affected Software1
Fedora
Fedora
added 2014/09/27 9:47 a.m.30 views

[SECURITY] Fedora 20 Update: libkdcraw-4.14.1-1.fc20

Libkdcraw is a C++ interface around LibRaw library used to decode RAW picture files. More information about LibRaw can be found at http://www.libraw.org...

6.9CVSS0.5AI score0.00359EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.23 views

openSUSE Security Update : libraw (openSUSE-SU-2013:1085-1)

This update of libraw fixes a security issue. - security update : - CVE-2013-2126.patch bnc822665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-537. The text description of thi...

7.5CVSS9.3AI score0.04534EPSS
SaveExploits1References3
OSV
OSV
added 2014/02/10 8:21 p.m.15 views

MGASA-2014-0050 Updated darktable package fixes two vulnerabilities

Updated darktable package fixes security vulnerabilities: Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of servi...

4.3CVSS6.2AI score0.02059EPSS
SaveExploits1References3
Mageia
Mageia
added 2014/02/10 8:21 p.m.40 views

Updated darktable package fixes two vulnerabilities

Updated darktable package fixes security vulnerabilities: Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of servi...

4.3CVSS4.2AI score0.02059EPSS
SaveExploits1References2
Prion
Prion
added 2014/01/19 6:02 p.m.16 views

Null pointer dereference

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...

4.3CVSS6.7AI score0.02059EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2014/01/19 4:00 p.m.96 views

CVE-2013-1438

CVE-2013-1438 affects dcraw 0.8.x–0.8.9 (used by libraw, ufraw, shotwell). The underlying issue causes a denial of service when processing a crafted photo, via divide-by-zero, infinite loop, or NULL pointer dereference. Exploitation details are not provided beyond this and no official patch/versi...

4.3CVSS6.1AI score0.02059EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2014/01/17 12:24 a.m.11 views

MGASA-2014-0011 Updated dcraw and ufraw package fix security vulnerability

Due to flaws in the embedded copy of LibRaw in dcraw and ufraw, corrupt input files might trigger a division by zero, an infinite loop, or a null pointer dereference CVE-2013-1438. The dcraw and ufraw packages have been updated to their newest versions and patched to fix the flaws in the embedded...

4.3CVSS6.3AI score0.02059EPSS
SaveExploits0References4
Mageia
Mageia
added 2014/01/17 12:24 a.m.44 views

Updated dcraw and ufraw package fix security vulnerability

Due to flaws in the embedded copy of LibRaw in dcraw and ufraw, corrupt input files might trigger a division by zero, an infinite loop, or a null pointer dereference CVE-2013-1438. The dcraw and ufraw packages have been updated to their newest versions and patched to fix the flaws in the embedded...

4.3CVSS1.3AI score0.02059EPSS
SaveExploits0References3
OSV
OSV
added 2013/12/23 5:20 p.m.11 views

MGASA-2013-0385 Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439

Updated libkdcraw packages fix libraw security vulnerabilities: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denia...

4.3CVSS6.2AI score0.02059EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/10/11 12:00 a.m.24 views

Mandriva Linux Security Advisory : libraw (MDVSA-2013:249)

Updated libraw packages fix security vulnerabilities : It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of...

4.3CVSS8.2AI score0.02059EPSS
SaveExploits1References3
OSV
OSV
added 2013/10/09 10:39 p.m.13 views

MGASA-2013-0301 Updated libraw packages fix security vulnerabilities

Updated libraw packages fix security vulnerabilities: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of servi...

4.3CVSS6.2AI score0.02059EPSS
SaveExploits1References3
Mageia
Mageia
added 2013/10/09 10:39 p.m.39 views

Updated libraw packages fix security vulnerabilities

Updated libraw packages fix security vulnerabilities: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of servi...

4.3CVSS1.7AI score0.02059EPSS
SaveExploits1References2
securityvulns
securityvulns
added 2013/10/01 12:00 a.m.51 views

libraw / libKDCraw DoS

Crash on raw images parsing...

4.3CVSS2.9AI score0.02059EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2013/09/24 12:00 a.m.74 views

Ubuntu Update for libraw USN-1964-1

Check for the Version of libraw OpenVAS Vulnerability Test $Id: gbubuntuUSN19641.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for libraw USN-1964-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

4.3CVSS9.6AI score0.02059EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2013/09/24 12:00 a.m.19 views

Ubuntu: Security Advisory (USN-1964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.02059EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/09/24 12:00 a.m.31 views

Ubuntu 12.04 LTS / 12.10 / 13.04 : libraw vulnerabilities (USN-1964-1)

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of service. CVE-2013-1438, CVE-2013-1439. Note that Tenable...

4.3CVSS8.1AI score0.02059EPSS
SaveExploits1References3
Ubuntu
Ubuntu
added 2013/09/23 5:42 p.m.43 views

USN-1964-1: LibRaw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of service. CVE-2013-1438, CVE-2013-1439...

4.3CVSS8.2AI score0.02059EPSS
SaveExploits1
OSV
OSV
added 2013/09/16 7:14 p.m.12 views

CVE-2013-1439

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service NULL pointer dereference via a crafted photo file...

6AI score
SaveExploits0References5
Rows per page
Query Builder