NewStart CGSL MAIN 6.02 : LibRaw Vulnerability (NS-SA-2021-0063)

The remote NewStart CGSL host, running version MAIN 6.02, has LibRaw packages installed that are affected by a vulnerability: - LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example,...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=6357422487764992 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f9c0b426aa0 Crash State: libcppstrchr...

freeimage:load_from_memory_fuzzer: Index-out-of-bounds in LibRaw::parse_tiff_ifd

Detailed Report: https://oss-fuzz.com/testcase?key=5499341578174464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerubsanfreeimage Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsetiffifd...

freeimage:load_from_memory_fuzzer: Crash in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5003343987605504 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605f85000ec2 Crash State: MemoryReadProc...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::adjust_bl

Detailed Report: https://oss-fuzz.com/testcase?key=4949085883858944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::adjustbl LibRaw::raw2imageex...

OSV-2021-427 Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31181 Crash type: Heap-buffer-overflow READ 1 Crash state: LibRaw::kodakc330loadraw LibRaw::unpack librawfuzzer.cc...

PT-2021-28106

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the LibRaw::kodak c330 load raw function, specifically when calling LibRaw::unpack. This is based on an OSS-Fuzz report...

libraw:libraw_fuzzer: Heap-buffer-overflow in LibRaw::kodak_c330_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5078026003021824 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2020-24870

A stack buffer overflow vulnerability was found in LibRaw. This flaw allows a malicious user to send a crafted image that, when parsed by an application linked to LibRaw, leads to a denial of service or potential code execution...

libraw:libraw_fuzzer: Use-of-uninitialized-value in __libcpp_strstr

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6011999236521984 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=5423237502730240 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f192fe3dca0 Crash State: libcppstrchr...

OSV-2021-282 Heap-buffer-overflow in LibRaw_buffer_datastream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30324 Crash type: Heap-buffer-overflow WRITE Crash state: LibRawbufferdatastream::read LibRaw::uncompressedfpdngloadraw LibRaw::unpack...

PT-2021-28049

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving the functions LibRaw buff...

libraw:libraw_cr2_fuzzer: Heap-buffer-overflow in LibRaw_buffer_datastream::read

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5640541247242240 Project: libraw Fuzzing Engine: afl Fuzz Target: librawcr2fuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x61f0000028c0 Crash...

CentOS 8 : GNOME (CESA-2020:1766)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1766 advisory. - LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 - gvfs: mishandling of file ownership in...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::subtract_black_internal

Detailed Report: https://oss-fuzz.com/testcase?key=4929946558529536 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::subtractblackinternal...

Updated rawtherapee package fixes a security vulnerability

There is a floating point exception in dcrawcommon.cpp of libRAW. It will lead to remote denial of service attack. This code is embedded in rawtherapee CVE-2017-13735...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6308396152258560 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed Report: https://oss-fuzz.com/testcase?key=6594769555554304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::ljpegdiff...

imagemagick:ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parseLeicaMakernote

Detailed Report: https://oss-fuzz.com/testcase?key=6222680458133504 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parseLeicaMakernote...