Lucene search
Veracode Vulnerability DatabaseVERACODE:37854HistoryNov 09, 2022 - 9:13 a.m.
Denial Of Service (DoS)
2022-11-0909:13:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
60.6%
libraw.so is vulnerable to Denial Of Service (DoS). The vulnerability exists due to a NULL pointer dereference in dcraw which allows an attacker to cause an application crash via a crafted photo file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libraw.so | eq | 5.0.0 | |
| libraw_r.so | eq | 5.0.0 | |
| libraw.so | eq | 5.0.0 | |
| libraw_r.so | eq | 5.0.0 |
Related
debiancve
debiancve
CVE-2013-1439
2013-09-16 19:14:00
cve
cve
CVE-2013-1439
2013-09-16 19:14:00
prion
prion
Null pointer dereference
2013-09-16 19:14:00
cvelist
cvelist
CVE-2013-1439
2013-09-16 19:00:00
ubuntucve
ubuntucve
CVE-2013-1439
2013-09-16 00:00:00
securityvulns
securityvulns
libraw / libKDCraw DoS
2013-10-01 00:00:00
[USN-1978-1] libKDcraw vulnerabilities
2013-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: LibRaw-0.14.8-3.fc19.20120830git98d925
2013-09-09 23:50:03
[SECURITY] Fedora 18 Update: ufraw-0.19.2-10.fc18
2013-12-16 23:05:40
[SECURITY] Fedora 20 Update: dcraw-9.19-4.fc20
2013-12-17 19:15:50
nessus
nessus
Fedora 20 : dcraw-9.19-4.fc20 (2013-22854)
2013-12-18 00:00:00
Fedora 18 : ufraw-0.19.2-10.fc18 (2013-22899)
2013-12-17 00:00:00
Fedora 20 : ufraw-0.19.2-10.fc20 (2013-22832)
2013-12-18 00:00:00
openvas
openvas
Ubuntu Update for libraw USN-1964-1
2013-09-24 00:00:00
Ubuntu: Security Advisory (USN-1978-1)
2013-10-03 00:00:00
Ubuntu: Security Advisory (USN-1964-1)
2013-09-24 00:00:00
mageia
mageia
Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439
2013-12-23 21:20:10
Updated darktable package fixes two vulnerabilities
2014-02-11 00:21:49
Updated libraw packages fix security vulnerabilities
2013-10-10 02:39:51
ubuntu
ubuntu
libKDcraw vulnerabilities
2013-09-30 00:00:00
LibRaw vulnerabilities
2013-09-23 00:00:00
gentoo
gentoo
LibRaw, libkdcraw: Multiple vulnerabilities
2013-09-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
60.6%
Related for VERACODE:37854