2343 matches found
LibRaw security update
0.19.5-4 - Backport fix for CVE-2021-32142 from upstream Resolves: RHEL-9523...
RHEL 8 : LibRaw (RHSA-2024:2994)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2994 advisory. LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffe...
Moderate: Red Hat Security Advisory: LibRaw security update
An update for LibRaw is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp
A flaw was found in the LibRaw package. A stack buffer overflow in the LibRawbufferdatastream::gets function in src/librawdatastream.cpp caused by a maliciously crafted file may result in compromised confidentiality and integrity and an application crash...
CentOS 8 : LibRaw (CESA-2024:2994)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:2994 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in...
Moderate: LibRaw security update
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffer overflow in LibRawbufferdatastream::gets in src/librawdatastream.cpp CVE-2021-32142 For more details about the security issues, including the...
ALSA-2024:2994 Moderate: LibRaw security update
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: stack buffer overflow in LibRawbufferdatastream::gets in src/librawdatastream.cpp CVE-2021-32142 For more details about the security issues, including the...
imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6037933126647808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...
RHEL 8 : libraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - LibRaw: Stack-based buffer overflow in quicktake100loadraw function in internal/dcrawcommon.cpp...
RHEL 7 : libraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libraw: Memory corruption in the parsetiffifd CVE-2017-6886 - There is a floating point exception in the...
RHEL 5 : libraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libraw: Out-of-bounds read in the kodak65000loadraw function CVE-2017-14608 - LibRaw: Out-of-bounds read ...
RHEL 6 : libraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libraw: Out-of-bounds read in the kodak65000loadraw function CVE-2017-14608 - LibRaw: Stack buffer overfl...
imagemagick:encoder_inline_fuzzer: Use-of-uninitialized-value in LibRaw_bigfile_datastream::size
Detailed Report: https://oss-fuzz.com/testcase?key=6007132397830144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderinlinefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRawbigfiledatastream::siz...
Oracle Linux 9 : LibRaw (ELSA-2024-2137)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2137 advisory. 0.21.1-1 - 0.21.1 - Include the fix for CVE-2023-1729 from Fedora Resolves: RHEL-768 Tenable has extracted the preceding description block directly from the...
imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::parse_smal
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6331994874118144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::sget2
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5288757864497152 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
libraw:libraw_raf_fuzzer: Heap-buffer-overflow in LibRaw::xtrans_interpolate
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5090302665752576 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
LibRaw security update
0.21.1-1 - 0.21.1 - Include the fix for CVE-2023-1729 from Fedora Resolves: RHEL-768...
Low: Red Hat Security Advisory: LibRaw security update
An update for LibRaw is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...