CVE-2013-1438

2013-08-3000:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

46.5%

JSON

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw,
ufraw, shotwell, and other products, allows context-dependent attackers to
cause a denial of service via a crafted photo file that triggers a (1)
divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.

Bugs

Notes

Author	Note
jdstrand	upstream says to use 0.14-stable branch from github repo
sbeattie	darktable as of 2.0.0 does not have embedded LibRaw anymore

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchdcraw< anyUNKNOWN
ubuntu16.04noarchdcraw< anyUNKNOWN
ubuntu12.04noarchlibkdcraw< 4:4.8.5-0ubuntu0.3UNKNOWN
ubuntu17.10noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu18.04noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu18.10noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu19.04noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu19.10noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu20.04noarchlibraw< 0.15.3-1ubuntu1UNKNOWN
ubuntu20.10noarchlibraw< 0.15.3-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	dcraw	< any	UNKNOWN
ubuntu	16.04	noarch	dcraw	< any	UNKNOWN
ubuntu	12.04	noarch	libkdcraw	< 4:4.8.5-0ubuntu0.3	UNKNOWN
ubuntu	17.10	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	18.04	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	18.10	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	19.04	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	19.10	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	20.04	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN
ubuntu	20.10	noarch	libraw	< 0.15.3-1ubuntu1	UNKNOWN