LibRaw vulnerability

2013-06-1800:00:00

ubuntu.com

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.7%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

libraw - raw image decoder library

Details

It was discovered that LibRaw incorrectly handled broken full-color images.
If a user or automated system were tricked into processing a specially
crafted raw image, applications linked against LibRaw could be made to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchlibraw5< 0.14.7-0ubuntu1.13.04.1UNKNOWN
Ubuntu13.04noarchlibraw-bin< 0.14.7-0ubuntu1.13.04.1UNKNOWN
Ubuntu13.04noarchlibraw-dev< 0.14.7-0ubuntu1.13.04.1UNKNOWN
Ubuntu12.10noarchlibraw5< 0.14.7-0ubuntu1.12.10.1UNKNOWN
Ubuntu12.10noarchlibraw-bin< 0.14.7-0ubuntu1.12.10.1UNKNOWN
Ubuntu12.10noarchlibraw-dev< 0.14.7-0ubuntu1.12.10.1UNKNOWN
Ubuntu12.04noarchlibraw5< 0.14.4-0ubuntu2.1UNKNOWN
Ubuntu12.04noarchlibraw-bin< 0.14.4-0ubuntu2.1UNKNOWN
Ubuntu12.04noarchlibraw-dev< 0.14.4-0ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	libraw5	< 0.14.7-0ubuntu1.13.04.1	UNKNOWN
Ubuntu	13.04	noarch	libraw-bin	< 0.14.7-0ubuntu1.13.04.1	UNKNOWN
Ubuntu	13.04	noarch	libraw-dev	< 0.14.7-0ubuntu1.13.04.1	UNKNOWN
Ubuntu	12.10	noarch	libraw5	< 0.14.7-0ubuntu1.12.10.1	UNKNOWN
Ubuntu	12.10	noarch	libraw-bin	< 0.14.7-0ubuntu1.12.10.1	UNKNOWN
Ubuntu	12.10	noarch	libraw-dev	< 0.14.7-0ubuntu1.12.10.1	UNKNOWN
Ubuntu	12.04	noarch	libraw5	< 0.14.4-0ubuntu2.1	UNKNOWN
Ubuntu	12.04	noarch	libraw-bin	< 0.14.4-0ubuntu2.1	UNKNOWN
Ubuntu	12.04	noarch	libraw-dev	< 0.14.4-0ubuntu2.1	UNKNOWN