1828 matches found
Debian: Security Advisory (DLA-3433-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5412-1] libraw security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 27, 2023 https://www.debian.org/security/faq -...
[SECURITY] [DLA 3433-1] libraw security update
Debian LTS Advisory DLA-3433-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 27, 2023 https://wiki.debian.org/LTS Package : libraw Version : 0.19.2-2+deb10u3 CVE ID : CVE-2021-32142 CVE-2023-1729 Debian Bug : 1031790 1036281 Buffer Overflow vulnerabilities we...
DLA-3433-1 libraw - security update
Bulletin has no description...
Debian DSA-5412-1 : libraw - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5412 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in...
Debian dla-3433 : libraw-bin - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3433 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3433-1 [email protected]...
Fedora: Security Advisory for mingw-LibRaw (FEDORA-2023-88c87f6191)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for mingw-LibRaw (FEDORA-2023-b19f236bc7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2023-1280 LibRaw security update
LibRaw is a library for reading RAW files from digital photo cameras CRW/CR2, NEF, RAF, etc, virtually all RAW formats are supported.It pays special attention to correct retrieval of data required for subsequent RAW conversion.The library is intended for embedding in RAW converters, data analyzer...
[SECURITY] Fedora 37 Update: mingw-LibRaw-0.20.2-9.fc37
MinGW Windows LibRaw library...
[SECURITY] Fedora 38 Update: mingw-LibRaw-0.21.1-3.fc38
MinGW Windows LibRaw library...
Fedora 38 : mingw-LibRaw (2023-b19f236bc7)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b19f236bc7 advisory. Backport fix for CVE-2023-1729. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 37 : mingw-LibRaw (2023-88c87f6191)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-88c87f6191 advisory. Backport fix for CVE-2023-1729. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
LibRaw buffer overflow vulnerability (CNVD-2023-43232)
Libraw is Libraw's C++ library for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images, supporting various operating systems. LibRaw suffers from a buffer overflow vulnerability that originates from a boundary error in the function raw2imageexint when handling untrusted input. A remote...
Denial Of Services (DoS)
libraw.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to a heap-buffer overflow in the raw2imageex function of raw2image.cpp, which allows an attacker to cause an application crash through a maliciously crafted file...
SUSE SLED15: libraw-devel / libraw-devel-static / libraw-tools / libraw20 / etc (SUSE-SU-2023:2194-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2194-1 advisory. - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720. Tenable has extracted...
SUSE SLED12 / SLES12 Security Update : libraw (SUSE-SU-2023:2196-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2196-1 advisory. - CVE-2023-1729: Fixed a heap buffer overflow when converting an image bsc1210720. Tenable has extracted the preceding...
CVE-2023-1729
A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...