Lucene search
K

1805 matches found

OSV
OSV
added 2023/10/04 10:30 a.m.4 views

SUSE-SU-2023:3967-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

6.5CVSS6.6AI score0.00089EPSS
Exploits1References3
OSV
OSV
added 2023/10/04 10:30 a.m.4 views

SUSE-SU-2023:3966-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

6.5CVSS6.6AI score0.00089EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2023/09/21 12:0 a.m.1 views

The vulnerability of the LibRaw::stretch() function in the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the LibRaw::stretch function in the image processing library LibRaw is related to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing CRW files. Exploiting this vulnerability could allow a remote attacker to cause service...

7.8CVSS6.5AI score0.00089EPSS
Exploits1References13Affected Software6
Amazon
Amazon
added 2023/09/20 12:0 a.m.30 views

Medium: LibRaw

Issue Overview: Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F...

7.8CVSS6.3AI score0.00089EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2023/09/20 12:0 a.m.28 views

Amazon Linux 2 : LibRaw (ALAS-2023-2256)

The version of LibRaw installed on the remote host is prior to 0.19.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2256 advisory. Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 In...

7.8CVSS6.4AI score0.00089EPSS
Exploits4References12
OpenVAS
OpenVAS
added 2023/09/19 12:0 a.m.18 views

Ubuntu: Security Advisory (USN-6377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00089EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2023/09/18 1:15 p.m.44 views

USN-6377-1: LibRaw vulnerability

It was discovered that LibRaw incorrectly handled certain photo files. If a user o automated system were tricked into processing a specially crafted photo file, a remote attacker could possibly cause applications linked against LibRaw to crash, resulting in a denial of service...

6.5CVSS6.3AI score0.00089EPSS
Exploits1
OSV
OSV
added 2023/09/18 1:15 p.m.0 views

USN-6377-1 libraw vulnerability

It was discovered that LibRaw incorrectly handled certain photo files. If a user o automated system were tricked into processing a specially crafted photo file, a remote attacker could possibly cause applications linked against LibRaw to crash, resulting in a denial of service...

6.5CVSS6.4AI score0.00089EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/09/18 12:0 a.m.17 views

Ubuntu 20.04 LTS : LibRaw vulnerability (USN-6377-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6377-1 advisory. It was discovered that LibRaw incorrectly handled certain photo files. If a user o automated system were tricked into processing a specially crafted photo file, a...

6.5CVSS6.3AI score0.00089EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:0 a.m.1 views

The vulnerability of the x3f_utils_patched.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the x3futilspatched.cpp component in the LibRaw image processing library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6AI score0.00029EPSS
Exploits1References5Affected Software5
SUSE CVE
SUSE CVE
added 2023/09/14 2:14 a.m.4 views

SUSE CVE-2020-22628

Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

6.5CVSS7.1AI score0.00089EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.15 views

Debian: Security Advisory (DLA-3560-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00089EPSS
Exploits1References4
Debian
Debian
added 2023/09/10 2:19 p.m.24 views

[SECURITY] [DLA 3560-1] libraw security update

Debian LTS Advisory DLA-3560-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 10, 2023 https://wiki.debian.org/LTS Package : libraw Version : 0.19.2-2+deb10u4 CVE ID : CVE-2020-22628 A Buffer Overflow vulnerability was found in the LibRaw::stretch...

6.5CVSS6.3AI score0.00089EPSS
Exploits1
OSV
OSV
added 2023/09/10 12:0 a.m.30 views

DLA-3560-1 libraw - security update

Bulletin has no description...

6.5CVSS6.5AI score0.00089EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/09/10 12:0 a.m.25 views

Debian dla-3560 : libraw-bin - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3560 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3560-1 [email protected] https://www.debian.org/lts/security/...

6.5CVSS6.2AI score0.00089EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/09/08 12:0 a.m.23 views

Amazon Linux 2 : LibRaw (ALAS-2023-2234)

The version of LibRaw installed on the remote host is prior to 0.19.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2234 advisory. In LibRaw, an out-of-bounds read vulnerability exists within the LibRaw::adobecopypixel function libraw\src\decoders\dng.c...

6.5CVSS6AI score0.0008EPSS
Exploits1References6
Amazon
Amazon
added 2023/09/05 12:0 a.m.28 views

Medium: LibRaw

Issue Overview: In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file. CVE-2020-35533 A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted fi...

6.5CVSS5.5AI score0.0008EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2023/08/28 3:48 p.m.24 views

CVE-2020-22628

A flaw was found in the libraw library. This issue occurs due to an out-of-bounds read vulnerability that exists within the "LibRaw::stretch" function libraw\src\postprocessing\aspectratio.cpp when parsing a crafted CRW file. Mitigation Mitigation for this issue is either not available or the...

6.5CVSS6.1AI score0.00089EPSS
Exploits1References4
NVD
NVD
added 2023/08/22 7:16 p.m.13 views

CVE-2020-22628

Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

6.5CVSS6.5AI score0.00089EPSS
Exploits1References2
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

DEBIAN-CVE-2020-22628

Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

6.5CVSS6.1AI score0.00089EPSS
Exploits1References1
Rows per page
Query Builder