2343 matches found
PT-2018-3824
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description The issue is related to an error within the leaf hdr load raw function in the internal/dcraw common.cpp component of LibRaw, which can be exploited to trigger a NULL pointer dereference. This can all...
PT-2018-3952
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description The issue is related to a boundary error within the quicktake 100 load raw function in the internal/dcraw common.cpp component of the LibRaw library. This error can lead to a stack-based buffer...
PT-2018-3836
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description A type confusion error within the identify function in LibRaw can be exploited to trigger a division by zero, potentially leading to a denial of service. The issue is related to a lack of division by...
FreeBSD : libraw -- multiple DoS vulnerabilities (c60804f1-126f-11e8-8b5b-4ccc6adda413)
Secunia Research reports : CVE-2017-16909: An error related to the 'LibRaw::panasonicloadraw' function dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image. CVE-2017-16910: An error within the...
FreeBSD : libraw -- multiple DoS vulnerabilities (6f0b0cbf-1274-11e8-8b5b-4ccc6adda413)
Secunia Research reports : CVE-2018-5800: An off-by-one error within the 'LibRaw::kodakycbcrloadraw' function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the 'LibRaw::unpack' function...
Debian: Security Advisory (DLA-1057-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1109-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
LibRaw 0.18.7 Denial Of Service Vulnerability
Exploit for linux platform in category dos / poc LibRaw 0.18.7 Denial Of Service Vulnerability ====================================================================== 1 Affected Software LibRaw versions prior to 0.18.7. ====================================================================== 2...
PT-2018-3833
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an error in the kodak radc load raw function, specifically with the buf variable, which can cause an out-of-bounds read memory access, leading to a crash. This can be exploite...
PT-2018-3827
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to errors in pointer dereferencing within the LibRaw library for image processing, specifically in the src/libraw cxx.cpp component. This can be exploited by a remote attacker to...
PT-2018-3837
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.9 Description The issue is related to an out-of-bounds read in the internal/dcraw common.cpp component of the LibRaw image processing library. This can be exploited by a remote attacker to access confidential data...
PT-2018-3831
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an off-by-one error within the LibRaw::kodak ycbcr load raw function in the internal/dcraw common.cpp component of the LibRaw library. This error can lead to a heap-based buff...
libraw -- multiple DoS vulnerabilities
Secunia Research reports: CVE-2018-5800: An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the "LibRaw::unpack" function src/librawcxx.c...
Fedora 27 : mingw-LibRaw (2017-d3cd18fb03)
Update to version 0.18.5, see https://www.libraw.org/news/libraw-0-18-5 for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 27 : mingw-LibRaw (2017-65f6ccf760)
Update to version 0.18.4, see https://github.com/LibRaw/LibRaw/blob/0.18-stable/Changelog.txt for details. ---- Update to version 0.18.3, see https://www.libraw.org/news/libraw-0-18-3 for details. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora 27 : LibRaw (2017-f04296e37e)
Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...
Fedora 27 : LibRaw (2017-0348398d64)
Fix for possible buffer overrun in kodak65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data Note that Tenable Network Security has extracted the preceding description block directly from the...
SUSE SLED12 Security Update : libraw (SUSE-SU-2017:3392-1)
This update for libraw fixes the following issues: Security issues fixed : - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...
