Linux Distros Unpatched Vulnerability : CVE-2017-14348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file. CVE-2017-14348 Note that Nessus relies on the...

Mageia: Security Advisory (MGASA-2017-0359)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : LibRaw (2017-f04296e37e)

Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...

MGASA-2017-0359 Updated rawtherapee packages fix security vulnerabilities

It was discovered that rawtherapee had a floating point exception in the kodakradcloadraw function in dcraw.cc CVE-2017-13735. It was discovered that rawtherapee had a Heap-based 1 byte buffer overflow in the processCanonCameraInfo function in dcraw.c CVE-2017-14348. It was discovered that...

Fedora 25 : mingw-LibRaw (2017-aa7a8871b7)

This update fixes CVE-2017-14348. ---- This update fixes CVE-2017-13735. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for mingw-LibRaw FEDORA-2017-aa7a8871b7

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libraw (openSUSE-2017-1086)

This update for libraw fixes the following issues : - CVE-2017-14348: A specially crafted file could have been used to trigger a heap-based buffer overflow boo1058467 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 26 : LibRaw (2017-90500f87f3)

Fix for possible buffer overrun in kodak65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- Patch for CVE-2017-14348 Note that Tenable Network Security has extracted the preceding...

CVE-2017-14348

CVE-2017-14348 affects LibRaw (the LibRaw library used to parse RAW image formats). The vulnerability is a heap-based buffer overflow in LibRaw::processCanonCameraInfo triggered by a crafted file, reported across multiple advisories. Potential impact cited in connected sources includes remote ins...

CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file...