Lucene search
Veracode Vulnerability DatabaseVERACODE:27038HistorySep 21, 2020 - 6:32 a.m.
Denial Of Service (DoS)
2020-09-2106:32:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.009 Low
EPSS
Percentile
82.3%
ufraw is vulnerable to stack-based buffer overflow. It is due to a flaw in the find_green() function, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ufraw:bionic | eq | 0.22-3 | |
| ufraw:bionic | eq | 0.22-3 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086
bugs.debian.org/cgi-bin/bugreport.cgi?bug=906529
lists.fedoraproject.org/archives/list/[email protected]/message/Q3JX4A5F4DWP6NOEULXQXZ5AIH4GA62U/
lists.fedoraproject.org/archives/list/[email protected]/message/RD65NMWZ5OQNUIF7CLGKLDG4LVPPMJY7/
lists.fedoraproject.org/archives/list/[email protected]/message/XK4SHVVIZT6FHJVHOQSAFJMQWDLMWKDE/
Related
nessus
nessus
EulerOS 2.0 SP3 : dcraw (EulerOS-SA-2019-2002)
2019-09-24 00:00:00
EulerOS 2.0 SP5 : dcraw (EulerOS-SA-2019-1879)
2019-09-16 00:00:00
EulerOS 2.0 SP2 : dcraw (EulerOS-SA-2019-1840)
2019-09-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for dcraw (EulerOS-SA-2019-1817)
2020-01-23 00:00:00
Fedora: Security Advisory for dcraw (FEDORA-2020-19c7f8e25f)
2020-03-29 00:00:00
Fedora: Security Advisory for dcraw (FEDORA-2020-545493aa4b)
2020-03-29 00:00:00
prion
prion
Stack overflow
2018-11-29 05:29:00
redhatcve
redhatcve
CVE-2018-19655
2018-12-06 10:19:22
debiancve
debiancve
CVE-2018-19655
2018-11-29 05:29:01
nvd
nvd
CVE-2018-19655
2018-11-29 05:29:01
cve
cve
CVE-2018-19655
2018-11-29 05:29:01
fedora
fedora
[SECURITY] Fedora 31 Update: dcraw-9.28.0-9.fc31
2020-03-29 01:37:22
[SECURITY] Fedora 32 Update: dcraw-9.28.0-9.fc32
2020-03-29 00:17:10
[SECURITY] Fedora 30 Update: dcraw-9.28.0-9.fc30
2020-03-29 01:59:45
ubuntucve
ubuntucve
CVE-2018-19655
2018-11-29 00:00:00
cvelist
cvelist
CVE-2018-19655
2018-11-29 05:00:00
mageia
mageia
Updated dcraw packages fix security vulnerabilities
2020-04-04 01:53:32
suse
suse
Security update for dcraw (moderate)
2022-04-20 00:00:00