Lucene search
Ubuntu.comUB:CVE-2013-1439HistorySep 16, 2013 - 12:00 a.m.
CVE-2013-1439
2013-09-1600:00:00
ubuntu.com
ubuntu.com
6
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
60.5%
The “faster LJPEG decoder” in libraw 0.13.x, 0.14.x, and 0.15.x before
0.15.4 allows context-dependent attackers to cause a denial of service
(NULL pointer dereference) via a crafted photo file.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721339 (darktable)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721338 (libraw)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721340 (libkdcraw)>
Notes
| Author | Note |
|---|---|
| jdstrand | upstream says to use 0.14-stable branch from github repo |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | libkdcraw | < 4:4.8.5-0ubuntu0.3 | UNKNOWN |
| ubuntu | 17.10 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 18.04 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 18.10 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 19.04 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 12.10 | noarch | libraw | < 0.14.7-0ubuntu1.12.10.2 | UNKNOWN |
| ubuntu | 13.04 | noarch | libraw | < 0.14.7-0ubuntu1.13.04.2 | UNKNOWN |
| ubuntu | 13.10 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
| ubuntu | 14.10 | noarch | libraw | < 0.15.3-1ubuntu1 | UNKNOWN |
Related
prion
prion
Null pointer dereference
2013-09-16 19:14:00
cvelist
cvelist
CVE-2013-1439
2013-09-16 19:00:00
debiancve
debiancve
CVE-2013-1439
2013-09-16 19:14:00
veracode
veracode
Denial Of Service (DoS)
2022-11-09 09:13:18
cve
cve
CVE-2013-1439
2013-09-16 19:14:00
openvas
openvas
Fedora Update for LibRaw FEDORA-2013-15562
2013-09-12 00:00:00
Fedora Update for dcraw FEDORA-2013-22929
2013-12-17 00:00:00
Mageia: Security Advisory (MGASA-2013-0301)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: ufraw-0.19.2-10.fc19
2013-12-16 23:02:21
[SECURITY] Fedora 19 Update: LibRaw-0.14.8-3.fc19.20120830git98d925
2013-09-09 23:50:03
[SECURITY] Fedora 20 Update: ufraw-0.19.2-10.fc20
2013-12-17 19:12:05
nessus
nessus
Mandriva Linux Security Advisory : libraw (MDVSA-2013:249)
2013-10-11 00:00:00
Fedora 20 : dcraw-9.19-4.fc20 (2013-22854)
2013-12-18 00:00:00
Fedora 18 : ufraw-0.19.2-10.fc18 (2013-22899)
2013-12-17 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2013-09-23 00:00:00
libKDcraw vulnerabilities
2013-09-30 00:00:00
mageia
mageia
Updated libraw packages fix security vulnerabilities
2013-10-10 02:39:51
Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439
2013-12-23 21:20:10
Updated darktable package fixes two vulnerabilities
2014-02-11 00:21:49
securityvulns
securityvulns
libraw / libKDCraw DoS
2013-10-01 00:00:00
[USN-1978-1] libKDcraw vulnerabilities
2013-10-01 00:00:00
gentoo
gentoo
LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
60.5%
Related for UB:CVE-2013-1439