Lucene search
Veracode Vulnerability DatabaseVERACODE:44891HistoryDec 28, 2023 - 3:12 p.m.
Buffer Overflow
2023-12-2815:12:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
libraw
buffer overflow
vulnerability
jpeg_start function
denial of service
software
improper size checks
raw image
exploit
attacker
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.048 Low
EPSS
Percentile
92.7%
LibRaw is vulnerable to Buffer Overflow. The vulnerability is due to improper size checks of the len variable in the jpeg_start function within dcraw. This issue can be exploited by an attacker via a maliciously crafted raw image resulting in Denial of Service.
Related
nessus
nessus
Fedora 22 : dcraw-9.25.0-2.fc22 (2015-8621)
2015-06-09 00:00:00
FreeBSD : dcraw -- integer overflow condition (57325ecf-facc-11e4-968f-b888e347c638)
2015-05-18 00:00:00
Fedora 22 : mingw-LibRaw-0.16.1-1.fc22 (2015-8085)
2015-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-LibRaw-0.16.2-1.fc21
2015-05-28 12:05:21
[SECURITY] Fedora 22 Update: ufraw-0.21-1.fc22
2015-06-05 23:59:05
[SECURITY] Fedora 22 Update: LibRaw-0.16.2-1.fc22
2015-05-26 03:31:06
openvas
openvas
Fedora Update for LibRaw FEDORA-2015-8247
2015-06-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0225)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-243-1)
2023-03-08 00:00:00
cve
cve
CVE-2015-3885
2015-05-19 18:59:00
mageia
mageia
Updated libraw packages fix CVE-2015-3885
2015-05-13 20:18:54
Updated xbmc packages fix CVE-2015-3885
2015-05-18 22:08:05
Updated ufraw & dcraw packages fix CVE-2015-3885
2015-05-13 20:18:54
debiancve
debiancve
CVE-2015-3885
2015-05-19 18:59:00
ubuntucve
ubuntucve
CVE-2015-3885
2015-05-19 00:00:00
debian
debian
[SECURITY] [DLA 228-1] exactimage security update
2015-05-28 07:14:06
[SECURITY] [DLA 241-1] libraw security update
2015-06-10 12:10:26
[SECURITY] [DLA 243-1] libraw security update
2015-06-10 20:19:37
osv
osv
exactimage - security update
2015-05-28 00:00:00
libraw - security update
2015-06-10 00:00:00
freebsd
freebsd
dcraw -- integer overflow condition
2015-04-24 00:00:00
prion
prion
Integer overflow
2015-05-19 18:59:00
gentoo
gentoo
DCRaw: Buffer overflow
2017-01-23 00:00:00
Kodi: Multiple vulnerabilities
2017-06-20 00:00:00
LibRaw: Multiple vulnerabilities
2017-01-24 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2017-11-22 00:00:00
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.048 Low
EPSS
Percentile
92.7%
Related for VERACODE:44891