12043 matches found
ECHO-6ED2-4F33-7D2A
Bulletin has no description...
ECHO-B104-18BE-DBA6
Bulletin has no description...
ECHO-34C9-A519-4B5C
Bulletin has no description...
ECHO-13E9-2447-AE62
Bulletin has no description...
ECHO-B2B2-3D93-518C
Bulletin has no description...
ECHO-96EA-A64A-B85B
Bulletin has no description...
ECHO-3B5A-4980-C0AD
Bulletin has no description...
ECHO-15A9-2872-255F
Bulletin has no description...
ECHO-ABE8-B546-AD42
Bulletin has no description...
ECHO-185F-C78C-4E82
Bulletin has no description...
ECHO-758D-EDBE-6881
Bulletin has no description...
ECHO-9E39-7166-9C17
Bulletin has no description...
ECHO-BC93-24A8-8727
Bulletin has no description...
ECHO-F8CB-56CE-2D8E
Bulletin has no description...
ECHO-2E96-17F7-CC4B
Bulletin has no description...
ECHO-AC58-CDA1-4C8B
Bulletin has no description...
ECHO-A95F-C9F9-A568
Bulletin has no description...
ECHO-B728-5F8B-4AD6
Bulletin has no description...
ECHO-DDB8-C818-EDCA Vulnerable code is not present in libraw 0.21.4 (the version shipped in Debian trixie). The CVE describes a heap out-of-bounds write in HuffTable::initval (src/decompressors/losslessjpeg.cpp), reachable via LibRaw::sony_ycbcr_load_raw -> LibRaw_LjpegDecompressor::initialize -> HuffTable::initval. None of those symbols exist in 0.21.4: the src/decompressors/ directory, the LibRaw_LjpegDecompressor class, and the sony_ycbcr_load_raw entry point were all introduced together in libraw 0.22.0. Empirically confirmed by running the public PoC from https://github.com/biniamf/pocs/tree/main/libraw_lljpeg against an ASan build of unpatched libraw 0.21.4: the file is rejected at open with "Unsupported file format or not RAW file"; the same PoC reproduces the heap-buffer-overflow in 0.22.0 with the stack trace from the Talos report.
Bulletin has no description...
ECHO-2FD9-B31C-16DF
Bulletin has no description...
ECHO-54F0-42DA-6974
Bulletin has no description...
ECHO-4B9F-FBF8-C429
Bulletin has no description...
ECHO-511D-493A-869E
Bulletin has no description...
ECHO-FE78-E324-D857
Bulletin has no description...
ECHO-7442-8F07-4D76 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6415-2AD8-C64D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-D68C-F009-ADEC Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-91B4-E7D6-F02C
Bulletin has no description...
ECHO-F91F-26EA-BBF3
Bulletin has no description...
ECHO-65C5-C654-E8D5
Bulletin has no description...
ECHO-8B5A-8E18-7EE1
Bulletin has no description...
ECHO-F535-0049-4D66
Bulletin has no description...
ECHO-11A3-7A00-131F
Bulletin has no description...
ECHO-138C-59C7-4E66
Bulletin has no description...
ECHO-74D4-CC6F-7870
Bulletin has no description...
ECHO-5EBC-A922-BBDA
Bulletin has no description...
ECHO-4BBE-FCA4-ABF7 Not affected in any debian version
Bulletin has no description...
ECHO-42F8-ED7B-D9F3
Bulletin has no description...
ECHO-971D-E2B5-F43C
Bulletin has no description...
ECHO-2CCD-8B25-A651
Bulletin has no description...
ECHO-6DE7-BED5-044A
Bulletin has no description...
ECHO-3D92-841B-34E6
Bulletin has no description...
ECHO-4FC2-67BD-0A7A
Bulletin has no description...
ECHO-BF64-F9B5-3E12
Bulletin has no description...
ECHO-D315-E755-ACCA Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-FB35-6C16-70F7 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-AC91-7757-58F6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-ADFD-5585-803E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...