Lucene search
Ubuntu.comUB:CVE-2015-3885HistoryMay 19, 2015 - 12:00 a.m.
CVE-2015-3885
2015-05-1900:00:00
ubuntu.com
ubuntu.com
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.048 Low
EPSS
Percentile
92.7%
Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier
allows remote attackers to cause a denial of service (crash) via a crafted
image, which triggers a buffer overflow, related to the len variable.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | dcraw | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | freeimage | < 3.15.4-3ubuntu0.1+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 24.04 | noarch | kodi | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | kodi | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | libraw | < 0.15.4-1ubuntu0.1 | UNKNOWN |
References
Related
nessus
nessus
Fedora 22 : dcraw-9.25.0-2.fc22 (2015-8621)
2015-06-09 00:00:00
FreeBSD : dcraw -- integer overflow condition (57325ecf-facc-11e4-968f-b888e347c638)
2015-05-18 00:00:00
Fedora 22 : mingw-LibRaw-0.16.1-1.fc22 (2015-8085)
2015-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-LibRaw-0.16.2-1.fc21
2015-05-28 12:05:21
[SECURITY] Fedora 22 Update: ufraw-0.21-1.fc22
2015-06-05 23:59:05
[SECURITY] Fedora 21 Update: ufraw-0.21-1.fc21
2015-06-05 23:43:52
openvas
openvas
Fedora Update for LibRaw FEDORA-2015-8247
2015-06-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0225)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-243-1)
2023-03-08 00:00:00
cve
cve
CVE-2015-3885
2015-05-19 18:59:00
mageia
mageia
Updated libraw packages fix CVE-2015-3885
2015-05-13 20:18:54
Updated xbmc packages fix CVE-2015-3885
2015-05-18 22:08:05
Updated ufraw & dcraw packages fix CVE-2015-3885
2015-05-13 20:18:54
debiancve
debiancve
CVE-2015-3885
2015-05-19 18:59:00
osv
osv
exactimage - security update
2015-05-28 00:00:00
libraw - security update
2015-06-10 00:00:00
debian
debian
[SECURITY] [DLA 228-1] exactimage security update
2015-05-28 07:14:06
[SECURITY] [DLA 241-1] libraw security update
2015-06-10 12:10:26
[SECURITY] [DLA 243-1] libraw security update
2015-06-10 20:19:37
veracode
veracode
Buffer Overflow
2023-12-28 15:12:15
freebsd
freebsd
dcraw -- integer overflow condition
2015-04-24 00:00:00
prion
prion
Integer overflow
2015-05-19 18:59:00
gentoo
gentoo
DCRaw: Buffer overflow
2017-01-23 00:00:00
Kodi: Multiple vulnerabilities
2017-06-20 00:00:00
LibRaw: Multiple vulnerabilities
2017-01-24 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2017-11-22 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.048 Low
EPSS
Percentile
92.7%
Related for UB:CVE-2015-3885