Lucene search
Veracode Vulnerability DatabaseVERACODE:37853HistoryNov 09, 2022 - 8:37 a.m.
Denial Of Service (DoS)
2022-11-0908:37:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
46.4%
libraw.so is vulnerable to Denial Of Service (DoS). The vulnerability exists due to a NULL pointer dereference in dcraw which allows an attacker to trigger an infinite loop or a devide-by-zero via a crafted photo file resulting in an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libraw.so | eq | 5.0.0 | |
| libraw_r.so | eq | 5.0.0 | |
| libraw.so | eq | 5.0.0 | |
| libraw_r.so | eq | 5.0.0 |
Related
nessus
nessus
Mandriva Linux Security Advisory : rawtherapee (MDVSA-2014:098)
2014-05-19 00:00:00
Debian DSA-2748-1 : exactimage - denial of service
2013-09-02 00:00:00
Fedora 20 : dcraw-9.19-4.fc20 (2013-22854)
2013-12-18 00:00:00
ubuntucve
ubuntucve
CVE-2013-1438
2013-08-30 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0081)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0071)
2022-01-28 00:00:00
Debian Security Advisory DSA 2748-1 (exactimage - denial of service)
2013-09-01 00:00:00
mageia
mageia
Updated xbmc package fixes a security vulnerability
2014-02-16 16:54:48
Updated rawtherapee package fixes security vulnerability
2014-02-17 04:25:25
Updated dcraw and ufraw package fix security vulnerability
2014-01-17 04:24:49
securityvulns
securityvulns
[SECURITY] [DSA 2748-1] exactimage security update
2013-09-09 00:00:00
exactimage DoS
2013-09-09 00:00:00
libraw / libKDCraw DoS
2013-10-01 00:00:00
osv
osv
exactimage - denial of service
2013-09-10 00:00:00
exactimage - denial of service
2013-09-01 00:00:00
cve
cve
CVE-2013-1438
2014-01-19 18:02:00
cvelist
cvelist
CVE-2013-1438
2014-01-19 16:00:00
prion
prion
Null pointer dereference
2014-01-19 18:02:00
debian
debian
[SECURITY] [DSA 2748-1] exactimage security update
2013-09-01 10:23:02
[SECURITY] [DSA 2754-1] exactimage security update
2013-09-10 22:29:12
debiancve
debiancve
CVE-2013-1438
2014-01-19 18:02:00
fedora
fedora
[SECURITY] Fedora 19 Update: LibRaw-0.14.8-3.fc19.20120830git98d925
2013-09-09 23:50:03
[SECURITY] Fedora 20 Update: dcraw-9.25.0-2.fc20
2015-06-06 00:07:51
[SECURITY] Fedora 20 Update: ufraw-0.21-1.fc20
2015-06-05 23:50:30
ubuntu
ubuntu
libKDcraw vulnerabilities
2013-09-30 00:00:00
LibRaw vulnerabilities
2013-09-23 00:00:00
gentoo
gentoo
LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
46.4%
Related for VERACODE:37853