Name: CVE-2020-24870: Out-of-bounds Write
Creator: Rapid7
Published: 2021-06-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-24870, CWE-787, CVSS 8.8, EPSS 0.00581

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-calculatorUpgrade gnome-sessionUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade gnome-session-kiosk-sessionUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-jsc-develUpgrade gnome-control-centerUpgrade mutterUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade webkit2gtk3Upgrade gnome-shell-extension-window-grouperUpgrade mutter-develUpgrade gnome-online-accounts-develUpgrade LibRaw-develUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-develUpgrade LibRawUpgrade gnome-shell-extension-places-menuUpgrade vinoUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdmUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shellUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-software-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-user-themeUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-jscUpgrade accountsserviceUpgrade gtk3Upgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsservice-libsUpgrade gnome-classic-session	May 4, 2022	Jun 2, 2021
Centos_linux	—	Upgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsserviceUpgrade gdm-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gdmUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-window-grouperUpgrade gnome-sessionUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-develUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade accountsservice-libsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-no-hot-cornerUpgrade vino-debuginfoUpgrade gtk3-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-commonUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-jscUpgrade gnome-shellUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-user-themeUpgrade mutter-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade vino-debugsourceUpgrade gtk-update-icon-cacheUpgrade gtk3-tests-debuginfoUpgrade vinoUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade accountsservice-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-softwareUpgrade gnome-software-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-apps-menuUpgrade gnome-software-debuginfoUpgrade gnome-shell-debugsourceUpgrade mutterUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libs-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-control-center-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-autoarUpgrade gnome-calculatorUpgrade LibRawUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-online-accountsUpgrade gnome-control-centerUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-window-list	Nov 10, 2021	Jun 2, 2021
Debian	—	Upgrade libraw	Jul 30, 2024	Jun 2, 2021
Gentoo Linux	—	Upgrade media-libs/libraw.	Aug 11, 2022	Jun 2, 2021
Oracle_linux	—	Upgrade gnome-shell-extension-screenshot-window-sizerUpgrade LibRaw-develUpgrade gnome-online-accountsUpgrade gnome-calculatorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-sessionUpgrade webkit2gtk3-jscUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoarUpgrade gtk3-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-settings-daemonUpgrade gnome-classic-sessionUpgrade webkit2gtk3-develUpgrade gnome-shellUpgrade accountsservice-develUpgrade gnome-software-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-drive-menuUpgrade LibRawUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-window-grouperUpgrade mutterUpgrade accountsservice-libsUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-places-menuUpgrade gnome-softwareUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-jsc-develUpgrade gtk3Upgrade webkit2gtk3Upgrade gnome-control-centerUpgrade gnome-online-accounts-develUpgrade gnome-session-xsessionUpgrade gdmUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-workspace-indicator	Nov 17, 2021	Aug 19, 2020
Redhat_linux	—	Upgrade mutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-develUpgrade LibRawUpgrade gnome-shell-extension-dash-to-dockUpgrade mutterUpgrade gdmUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade webkit2gtk3-jscUpgrade accountsservice-libs-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade LibRaw-samples-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-commonNo solution existsUpgrade gnome-shell-debugsourceUpgrade mutter-tests-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade accountsserviceUpgrade gtk3-immodule-ximUpgrade vinoUpgrade gnome-softwareUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-software-debuginfoUpgrade mutter-debuginfoUpgrade gnome-software-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debugsourceUpgrade vino-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-session-xsessionUpgrade accountsservice-develUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemasUpgrade accountsservice-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemonUpgrade gnome-calculator-debuginfoUpgrade vino-debugsourceUpgrade gnome-control-centerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-software-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRaw-develUpgrade gnome-session-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gtk3Upgrade gdm-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accountsUpgrade gnome-control-center-debuginfoUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-sessionUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-autoarUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsservice-libsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculator-debugsourceUpgrade gnome-calculatorUpgrade gnome-session-debuginfoUpgrade gtk-update-icon-cache	Nov 10, 2021	Jun 2, 2021
Rocky_linux	—	Upgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-sessionUpgrade accountsserviceUpgrade gnome-control-center-debugsourceUpgrade gtk3Upgrade gnome-session-wayland-sessionUpgrade gnome-shellUpgrade mutter-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-online-accounts-develUpgrade accountsservice-debugsourceUpgrade accountsservice-libsUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-online-accounts-debugsourceUpgrade vino-debugsourceUpgrade gtk3-debugsourceUpgrade webkit2gtk3Upgrade gtk-update-icon-cacheUpgrade gnome-calculatorUpgrade gnome-session-xsessionUpgrade gtk3-immodule-ximUpgrade mutter-develUpgrade gnome-settings-daemonUpgrade gdmUpgrade webkit2gtk3-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade LibRawUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-centerUpgrade gdm-debugsourceUpgrade gnome-autoarUpgrade mutterUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jscUpgrade gsettings-desktop-schemasUpgrade vino-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jsc-develUpgrade LibRaw-debuginfoUpgrade gnome-softwareUpgrade gnome-session-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-software-develUpgrade gnome-calculator-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade mutter-debugsourceUpgrade gtk3-develUpgrade accountsservice-debuginfoUpgrade gnome-online-accountsUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debuginfoUpgrade LibRaw-develUpgrade gtk3-debuginfoUpgrade vinoUpgrade accountsservice-develUpgrade gnome-online-accounts-debuginfo	Mar 12, 2024	Jun 2, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence