There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-menusUpgrade valaUpgrade vala-develUpgrade baobabUpgrade clutter-docUpgrade mozjs52Upgrade accountsservice-develUpgrade gjs-develUpgrade mozjs60Upgrade clutterUpgrade mozjs52-develUpgrade gnome-tweaksUpgrade clutter-develUpgrade gnome-menus-develUpgrade mozjs60-devel | May 4, 2022 | Dec 21, 2018 |
| Centos_linux | — | Upgrade clutter-debugsourceUpgrade mozjs60-debugsourceUpgrade gnome-session-debuginfoUpgrade vinagreUpgrade gnome-settings-daemonUpgrade mozjs60-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfsUpgrade gvfs-fuse-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade evince-libsUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade libxslt-debuginfoUpgrade appstream-dataUpgrade libvncserver-debuginfoUpgrade gnome-tweaksUpgrade gvfs-afcUpgrade gnome-session-debugsourceUpgrade gnome-boxes-debuginfoUpgrade LibRaw-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-smbUpgrade libvncserverUpgrade mozjs52-devel-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-afpUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-debuginfoUpgrade gvfs-client-debuginfoUpgrade gtk3-devel-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-debuginfoUpgrade gnome-sessionUpgrade accountsservice-libsUpgrade gjsUpgrade nautilusUpgrade evince-debugsourceUpgrade gnome-online-accountsUpgrade gtk3Upgrade libxslt-develUpgrade gvfs-develUpgrade clutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade evince-browser-pluginUpgrade gvfs-fuseUpgrade gnome-control-centerUpgrade gdm-debugsourceUpgrade evince-nautilusUpgrade gvfs-mtpUpgrade gnome-terminal-debugsourceUpgrade gnome-terminal-nautilusUpgrade gvfs-goaUpgrade nautilus-extensionsUpgrade gnome-remote-desktopUpgrade LibRaw-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gnome-software-debuginfoUpgrade mozjs60Upgrade gdm-debuginfoUpgrade gtk3-develUpgrade accountsservice-debuginfoUpgrade gvfs-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gjs-debuginfoUpgrade gnome-software-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade mutter-debuginfoUpgrade gnome-boxesUpgrade gtk3-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gnome-softwareUpgrade vinagre-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gnome-menus-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-boxes-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-menus-debuginfoUpgrade LibRawUpgrade gvfs-archiveUpgrade gvfs-goa-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-terminalUpgrade gjs-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade mutterUpgrade gtk-update-icon-cache-debuginfoUpgrade clutterUpgrade libxsltUpgrade baobabUpgrade mutter-tests-debuginfoUpgrade evinceUpgrade mozjs52Upgrade nautilus-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-software-editorUpgrade mozjs52-debuginfoUpgrade gvfs-gphoto2Upgrade evince-browser-plugin-debuginfoUpgrade gnome-shell-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gvfs-clientUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shellUpgrade mozjs52-debugsourceUpgrade baobab-debugsourceUpgrade gnome-menusUpgrade clutter-tests-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gsettings-desktop-schemasUpgrade nautilus-debugsourceUpgrade gtk3-debuginfoUpgrade baobab-debuginfoUpgrade gjs-tests-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade mutter-debugsourceUpgrade gdmUpgrade evince-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gtk3-immodule-ximUpgrade vinagre-debuginfoUpgrade libxslt-debugsourceUpgrade accountsserviceUpgrade gnome-control-center-debugsourceUpgrade evince-libs-debuginfoUpgrade gnome-online-accounts-devel | Apr 29, 2020 | Dec 21, 2018 |
| Debian | — | Upgrade libraw | Jul 30, 2024 | Dec 21, 2018 |
| Oracle_linux | — | Upgrade gnome-session-wayland-sessionUpgrade gnome-terminalUpgrade gtk3Upgrade gsettings-desktop-schemasUpgrade clutter-docUpgrade accountsservice-develUpgrade mozjs52Upgrade gnome-menusUpgrade mutter-develUpgrade accountsserviceUpgrade gdmUpgrade gnome-tweaksUpgrade gtk3-immodule-ximUpgrade mutterUpgrade gjs-develUpgrade clutterUpgrade vala-develUpgrade evinceUpgrade libvncserver-develUpgrade gnome-online-accounts-develUpgrade nautilus-develUpgrade gnome-control-center-filesystemUpgrade vinagreUpgrade LibRawUpgrade libxsltUpgrade gsettings-desktop-schemas-develUpgrade mozjs60-develUpgrade appstream-dataUpgrade gnome-softwareUpgrade gtk-update-icon-cacheUpgrade gjsUpgrade gnome-control-centerUpgrade gnome-sessionUpgrade evince-nautilusUpgrade clutter-develUpgrade mozjs60Upgrade gnome-online-accountsUpgrade gnome-software-editorUpgrade gnome-menus-develUpgrade nautilus-extensionsUpgrade gnome-shellUpgrade accountsservice-libsUpgrade nautilusUpgrade mozjs52-develUpgrade evince-browser-pluginUpgrade valaUpgrade gnome-remote-desktopUpgrade evince-libsUpgrade libxslt-develUpgrade gnome-terminal-nautilusUpgrade gnome-boxesUpgrade gnome-settings-daemonUpgrade libvncserverUpgrade gtk3-develUpgrade gnome-session-xsessionUpgrade LibRaw-devel | Jul 22, 2024 | Dec 18, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 21, 2018 |
| Redhat_linux | — | Upgrade gnome-remote-desktop-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-control-center-filesystemUpgrade gvfs-clientUpgrade gnome-menus-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade mozjs52-develUpgrade gvfs-goa-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-sessionUpgrade gnome-terminal-debuginfoUpgrade gvfs-client-debuginfoUpgrade baobabUpgrade gjs-debugsourceUpgrade LibRaw-debugsourceUpgrade clutter-docUpgrade gjs-debuginfoUpgrade evince-debuginfoUpgrade gtk3-devel-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-menus-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-control-centerUpgrade accountsservice-debuginfoUpgrade vala-develUpgrade libxslt-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mutter-debuginfoUpgrade clutter-tests-debuginfoUpgrade mutterUpgrade clutter-debugsourceUpgrade clutter-develUpgrade LibRawUpgrade gvfs-goaUpgrade mutter-tests-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade vinagre-debugsourceUpgrade accountsserviceUpgrade gtk3Upgrade gtk3-debugsourceUpgrade evince-libs-debuginfoUpgrade vala-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs60-develUpgrade gvfs-gphoto2-debuginfoUpgrade libxslt-develUpgrade evince-nautilus-debuginfoUpgrade gvfs-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade evince-nautilusUpgrade gvfs-afcUpgrade nautilus-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemonUpgrade clutter-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-afpUpgrade clutterUpgrade nautilus-extensionsUpgrade gjsUpgrade gnome-session-xsessionUpgrade gtk3-immodule-ximUpgrade gtk-update-icon-cacheUpgrade gvfs-smbUpgrade gdm-debuginfoUpgrade mozjs60Upgrade gnome-terminal-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade accountsservice-libsUpgrade gnome-online-accounts-debugsourceUpgrade libvncserver-debugsourceUpgrade gnome-session-debugsourceUpgrade evinceUpgrade gsettings-desktop-schemasUpgrade gtk3-develUpgrade gdmUpgrade accountsservice-libs-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade valaUpgrade accountsservice-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-remote-desktopUpgrade baobab-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-boxes-debuginfoUpgrade nautilus-develUpgrade mozjs52Upgrade evince-debugsourceUpgrade accountsservice-develUpgrade gnome-session-debuginfoUpgrade evince-browser-pluginUpgrade gnome-terminalUpgrade gnome-online-accountsUpgrade gvfs-develUpgrade gvfs-smb-debuginfoUpgrade gvfs-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gjs-develUpgrade gvfs-mtpUpgrade gtk3-immodules-debuginfoUpgrade gnome-menusUpgrade gvfs-archiveUpgrade evince-browser-plugin-debuginfoUpgrade libxslt-debugsourceUpgrade gvfs-fuseUpgrade vinagre-debuginfoUpgrade gvfs-afp-debuginfoUpgrade evince-libsUpgrade valadoc-debuginfoUpgrade libvncserver-develUpgrade gnome-shellUpgrade gnome-menus-develUpgrade mutter-debugsourceUpgrade libxsltUpgrade gtk3-debuginfoUpgrade gvfsUpgrade gnome-boxesUpgrade gnome-software-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-tweaksUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade gnome-software-editorUpgrade vinagreUpgrade gnome-boxes-debugsourceUpgrade gnome-terminal-nautilusUpgrade libvncserverUpgrade gjs-tests-debuginfoUpgrade gvfs-archive-debuginfoUpgrade mutter-develUpgrade gvfs-gphoto2Upgrade gtk3-immodule-xim-debuginfoUpgrade mozjs60-debuginfoUpgrade nautilus-debuginfoUpgrade gtk3-tests-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade nautilusUpgrade vala-debugsourceUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade gnome-softwareUpgrade LibRaw-develUpgrade appstream-dataUpgrade nautilus-extensions-debuginfo | Apr 29, 2020 | Dec 21, 2018 |
| Rocky_linux | — | Upgrade mozjs52-devel-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-develUpgrade clutterUpgrade clutter-develUpgrade mozjs52Upgrade mozjs60-debuginfoUpgrade mozjs60-develUpgrade gnome-menus-develUpgrade baobab-debuginfoUpgrade mozjs52-debuginfoUpgrade clutter-docUpgrade baobab-debugsourceUpgrade gnome-menusUpgrade baobabUpgrade clutter-debuginfoUpgrade mozjs60Upgrade gnome-menus-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs60-debugsourceUpgrade clutter-debugsource | Mar 12, 2024 | Dec 21, 2018 |
| Suse | — | Upgrade libraw16Upgrade libraw-devel-staticUpgrade libraw-toolsUpgrade libraw-devel | Jan 31, 2019 | Dec 21, 2018 |
| Ubuntu | — | Upgrade libraw15Upgrade libraw16 | May 22, 2019 | Dec 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub