There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vala-develUpgrade baobabUpgrade clutter-docUpgrade gnome-menusUpgrade valaUpgrade gjs-develUpgrade mozjs52-develUpgrade clutter-develUpgrade mozjs60Upgrade gnome-menus-develUpgrade gnome-tweaksUpgrade mozjs52Upgrade accountsservice-develUpgrade clutterUpgrade mozjs60-devel | May 4, 2022 | Dec 21, 2018 |
| Centos_linux | — | Upgrade mozjs60-debugsourceUpgrade evince-debugsourceUpgrade gnome-online-accountsUpgrade gjsUpgrade gnome-terminal-debugsourceUpgrade gnome-settings-daemonUpgrade gvfs-afpUpgrade gtk3-tests-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-client-debuginfoUpgrade gvfs-debuginfoUpgrade gvfs-debugsourceUpgrade gtk-update-icon-cacheUpgrade libvncserverUpgrade gvfs-afcUpgrade accountsservice-libsUpgrade libvncserver-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-sessionUpgrade gvfsUpgrade gnome-terminal-nautilus-debuginfoUpgrade gdm-debuginfoUpgrade evince-libsUpgrade nautilus-extensions-debuginfoUpgrade gnome-session-debugsourceUpgrade libvncserver-debugsourceUpgrade gnome-session-debuginfoUpgrade appstream-dataUpgrade gnome-online-accounts-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-terminal-debuginfoUpgrade mozjs60Upgrade gnome-tweaksUpgrade vinagreUpgrade gvfs-fuse-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-control-center-debuginfoUpgrade mozjs60-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-mtpUpgrade clutter-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade accountsservice-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-develUpgrade gvfs-fuseUpgrade gnome-software-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-control-centerUpgrade clutter-debuginfoUpgrade gtk3Upgrade nautilus-extensionsUpgrade libxslt-develUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade gvfs-develUpgrade nautilusUpgrade gvfs-goaUpgrade gnome-remote-desktopUpgrade gvfs-smbUpgrade gtk3-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-debuginfoUpgrade gvfs-afp-debuginfoUpgrade mutter-debuginfoUpgrade gnome-boxesUpgrade evince-nautilus-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-softwareUpgrade gnome-menusUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-xsessionUpgrade gvfs-afc-debuginfoUpgrade nautilus-debugsourceUpgrade evince-debuginfoUpgrade mutter-debugsourceUpgrade vinagre-debuginfoUpgrade LibRawUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-debugsourceUpgrade clutter-tests-debuginfoUpgrade gjs-debuginfoUpgrade gdmUpgrade gnome-control-center-filesystemUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-debuginfoUpgrade mozjs52-debugsourceUpgrade baobab-debugsourceUpgrade gnome-shellUpgrade gnome-control-center-debugsourceUpgrade evince-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-develUpgrade gvfs-mtp-debuginfoUpgrade gvfs-clientUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-software-debugsourceUpgrade gjs-debugsourceUpgrade gvfs-gphoto2Upgrade accountsservice-libs-debuginfoUpgrade mozjs52-debuginfoUpgrade gvfs-goa-debuginfoUpgrade accountsservice-debugsourceUpgrade baobab-debuginfoUpgrade gvfs-archiveUpgrade clutterUpgrade gnome-boxes-debugsourceUpgrade mozjs52Upgrade mutter-tests-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade libxsltUpgrade mutterUpgrade evinceUpgrade gnome-software-editorUpgrade nautilus-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-menus-debuginfoUpgrade gnome-terminalUpgrade baobabUpgrade evince-browser-plugin-debuginfoUpgrade vinagre-debugsourceUpgrade gnome-menus-debugsourceUpgrade gjs-tests-debuginfoUpgrade libxslt-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gtk3-immodule-ximUpgrade accountsservice | Apr 29, 2020 | Dec 21, 2018 |
| Debian | — | Upgrade libraw | Jul 30, 2024 | Dec 21, 2018 |
| Oracle_linux | — | Upgrade gnome-menus-develUpgrade gnome-software-editorUpgrade gnome-boxesUpgrade accountsservice-libsUpgrade gnome-shellUpgrade gnome-terminal-nautilusUpgrade libxslt-develUpgrade evince-libsUpgrade gnome-settings-daemonUpgrade gnome-remote-desktopUpgrade LibRaw-develUpgrade gtk3-develUpgrade gnome-session-xsessionUpgrade nautilus-extensionsUpgrade gnome-control-centerUpgrade gnome-online-accountsUpgrade clutter-develUpgrade gjsUpgrade gnome-sessionUpgrade mozjs60Upgrade gtk-update-icon-cacheUpgrade libvncserverUpgrade mozjs52-develUpgrade valaUpgrade evince-nautilusUpgrade nautilusUpgrade evince-browser-pluginUpgrade evinceUpgrade gjs-develUpgrade nautilus-develUpgrade clutter-docUpgrade accountsserviceUpgrade mutterUpgrade gtk3-immodule-ximUpgrade vala-develUpgrade clutterUpgrade gnome-tweaksUpgrade libxsltUpgrade vinagreUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-filesystemUpgrade accountsservice-develUpgrade gdmUpgrade LibRawUpgrade mozjs60-develUpgrade gnome-online-accounts-develUpgrade gtk3Upgrade libvncserver-develUpgrade gnome-menusUpgrade gnome-softwareUpgrade gnome-terminalUpgrade gsettings-desktop-schemas-develUpgrade mozjs52Upgrade gnome-session-wayland-sessionUpgrade appstream-dataUpgrade mutter-devel | Jul 22, 2024 | Dec 18, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 21, 2018 |
| Redhat_linux | — | Upgrade baobab-debuginfoUpgrade vinagre-debuginfoUpgrade baobab-debugsourceUpgrade gvfs-fuseUpgrade gnome-boxes-debugsourceUpgrade valadoc-debuginfoUpgrade evinceUpgrade gnome-software-editorUpgrade mozjs52-debuginfoUpgrade gnome-shell-debugsourceUpgrade libvncserverUpgrade gnome-boxes-debuginfoUpgrade mozjs60-debuginfoUpgrade gdm-debugsourceUpgrade mutter-debugsourceUpgrade mutter-develUpgrade vala-debugsourceUpgrade vinagreUpgrade nautilusUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-softwareUpgrade gnome-software-debuginfoUpgrade evince-libsUpgrade gnome-tweaksUpgrade gnome-session-debuginfoUpgrade gtk3-develUpgrade gnome-settings-daemon-debuginfoUpgrade nautilus-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-terminalUpgrade gnome-remote-desktopUpgrade gvfsUpgrade mozjs52Upgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-boxesUpgrade nautilus-extensions-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gjs-tests-debuginfoUpgrade gvfs-gphoto2Upgrade appstream-dataUpgrade gvfs-smb-debuginfoUpgrade gtk3-tests-debuginfoUpgrade libxsltUpgrade gnome-control-center-debuginfoUpgrade accountsservice-develUpgrade evince-browser-pluginUpgrade gdmUpgrade gnome-shellUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-menusUpgrade gsettings-desktop-schemasUpgrade libxslt-debugsourceUpgrade gnome-online-accountsUpgrade gvfs-mtpUpgrade libvncserver-develUpgrade libvncserver-debuginfoUpgrade LibRaw-develUpgrade gvfs-archiveUpgrade gnome-terminal-nautilusUpgrade gnome-menus-develUpgrade gvfs-debugsourceUpgrade gvfs-archive-debuginfoUpgrade accountsservice-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gvfs-develUpgrade gjs-develUpgrade valaUpgrade accountsservice-libs-debuginfoUpgrade nautilus-develUpgrade evince-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade clutter-docUpgrade mozjs60-develUpgrade gvfs-fuse-debuginfoUpgrade clutter-tests-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gjsUpgrade gtk3-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade mozjs60-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-session-xsessionUpgrade LibRaw-debuginfoUpgrade nautilus-extensionsUpgrade clutterUpgrade gnome-session-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-control-centerUpgrade vala-develUpgrade gnome-remote-desktop-debuginfoUpgrade libxslt-debuginfoUpgrade evince-nautilusUpgrade gnome-settings-daemonUpgrade gnome-session-wayland-sessionUpgrade gnome-remote-desktop-debugsourceUpgrade accountsserviceUpgrade gjs-debuginfoUpgrade clutter-develUpgrade gnome-menus-debuginfoUpgrade vinagre-debugsourceUpgrade mutterUpgrade gnome-terminal-nautilus-debuginfoUpgrade evince-libs-debuginfoUpgrade gjs-debugsourceUpgrade gnome-control-center-filesystemUpgrade mozjs52-develUpgrade gnome-software-debugsourceUpgrade mutter-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gvfs-afpUpgrade gdm-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-control-center-debugsourceUpgrade accountsservice-debuginfoUpgrade LibRaw-debugsourceUpgrade gtk3-debugsourceUpgrade clutter-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-shell-debuginfoUpgrade evince-debuginfoUpgrade nautilus-debugsourceUpgrade clutter-debuginfoUpgrade gvfs-debuginfoUpgrade mutter-tests-debuginfoUpgrade accountsservice-libsUpgrade gvfs-afcUpgrade gvfs-smbUpgrade gsettings-desktop-schemas-develUpgrade gnome-sessionUpgrade gvfs-gphoto2-debuginfoUpgrade libvncserver-debugsourceUpgrade mozjs60Upgrade gvfs-goaUpgrade gnome-terminal-debuginfoUpgrade libxslt-develUpgrade LibRawUpgrade mozjs52-devel-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-terminal-debugsourceUpgrade gtk3Upgrade vala-debuginfoUpgrade baobabUpgrade gvfs-clientUpgrade gnome-online-accounts-debugsource | Apr 29, 2020 | Dec 21, 2018 |
| Rocky_linux | — | Upgrade mozjs52-devel-debuginfoUpgrade mozjs52-develUpgrade mozjs52-debugsourceUpgrade clutterUpgrade gnome-menus-develUpgrade clutter-develUpgrade mozjs52Upgrade mozjs60-develUpgrade mozjs60-debuginfoUpgrade clutter-debugsourceUpgrade baobab-debuginfoUpgrade mozjs52-debuginfoUpgrade baobabUpgrade gnome-menus-debugsourceUpgrade mozjs60-debugsourceUpgrade gnome-menus-debuginfoUpgrade clutter-debuginfoUpgrade gnome-menusUpgrade mozjs60Upgrade baobab-debugsourceUpgrade clutter-doc | Mar 12, 2024 | Dec 21, 2018 |
| Suse | — | Upgrade libraw-develUpgrade libraw-devel-staticUpgrade libraw-toolsUpgrade libraw16 | Jan 31, 2019 | Dec 21, 2018 |
| Ubuntu | — | Upgrade libraw16Upgrade libraw15 | May 22, 2019 | Dec 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub