There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-tweaksUpgrade clutter-develUpgrade mozjs52-develUpgrade accountsservice-develUpgrade gnome-menus-develUpgrade mozjs52Upgrade mozjs60Upgrade mozjs60-develUpgrade clutterUpgrade gjs-develUpgrade valaUpgrade baobabUpgrade vala-develUpgrade clutter-docUpgrade gnome-menus | May 4, 2022 | Dec 21, 2018 |
| Centos_linux | — | Upgrade gdm-debuginfoUpgrade vinagreUpgrade clutter-debugsourceUpgrade mozjs60Upgrade gtk3-tests-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-tweaksUpgrade gnome-session-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gvfsUpgrade gvfs-afcUpgrade gvfs-gphoto2-debuginfoUpgrade evince-libsUpgrade gnome-terminal-debuginfoUpgrade evince-nautilusUpgrade accountsservice-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfs-fuseUpgrade gtk3-devel-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gvfs-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cacheUpgrade gdm-debugsourceUpgrade gnome-terminal-nautilusUpgrade accountsservice-libsUpgrade appstream-dataUpgrade clutter-debuginfoUpgrade gnome-remote-desktopUpgrade evince-debugsourceUpgrade gvfs-mtpUpgrade libxslt-develUpgrade gjsUpgrade nautilusUpgrade nautilus-extensionsUpgrade gnome-control-centerUpgrade evince-browser-pluginUpgrade gnome-online-accountsUpgrade gtk3Upgrade gnome-software-debuginfoUpgrade gvfs-develUpgrade gnome-session-wayland-sessionUpgrade gnome-boxes-debuginfoUpgrade gvfs-goaUpgrade gvfs-smbUpgrade libvncserverUpgrade LibRaw-debuginfoUpgrade LibRaw-debugsourceUpgrade libvncserver-debugsourceUpgrade gtk3-develUpgrade nautilus-extensions-debuginfoUpgrade gnome-session-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-sessionUpgrade gvfs-afpUpgrade gnome-online-accounts-debuginfoUpgrade mozjs52-debuginfoUpgrade evinceUpgrade nautilus-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-boxes-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gvfs-archiveUpgrade baobab-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shellUpgrade evince-libs-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-boxesUpgrade gnome-control-center-filesystemUpgrade gnome-online-accounts-develUpgrade gvfs-clientUpgrade gjs-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade vinagre-debugsourceUpgrade evince-debuginfoUpgrade accountsserviceUpgrade libxslt-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-session-xsessionUpgrade gvfs-gphoto2Upgrade gjs-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade baobab-debugsourceUpgrade gnome-software-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-menusUpgrade gsettings-desktop-schemasUpgrade evince-browser-plugin-debuginfoUpgrade nautilus-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade clutter-tests-debuginfoUpgrade vinagre-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gdmUpgrade gnome-terminalUpgrade mutter-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-afc-debuginfoUpgrade mutter-tests-debuginfoUpgrade baobabUpgrade mozjs52Upgrade accountsservice-libs-debuginfoUpgrade libxsltUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-menus-debugsourceUpgrade gnome-softwareUpgrade LibRawUpgrade gnome-software-editorUpgrade mozjs52-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade mutterUpgrade evince-nautilus-debuginfoUpgrade gjs-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-menus-debuginfoUpgrade clutterUpgrade gvfs-goa-debuginfo | Apr 29, 2020 | Dec 21, 2018 |
| Debian | — | Upgrade libraw | Jul 30, 2024 | Dec 21, 2018 |
| Oracle_linux | — | Upgrade gnome-remote-desktopUpgrade evince-libsUpgrade gnome-software-editorUpgrade gnome-online-accountsUpgrade libvncserverUpgrade valaUpgrade evince-nautilusUpgrade gnome-sessionUpgrade nautilusUpgrade mozjs52-develUpgrade gjsUpgrade libxslt-develUpgrade clutter-develUpgrade nautilus-extensionsUpgrade gtk3-develUpgrade gnome-terminal-nautilusUpgrade LibRaw-develUpgrade accountsservice-libsUpgrade gnome-settings-daemonUpgrade gnome-shellUpgrade evince-browser-pluginUpgrade gnome-control-centerUpgrade gtk-update-icon-cacheUpgrade mozjs60Upgrade gnome-menus-develUpgrade gnome-boxesUpgrade gnome-session-xsessionUpgrade clutter-docUpgrade gdmUpgrade vinagreUpgrade accountsserviceUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade libvncserver-develUpgrade gsettings-desktop-schemasUpgrade mozjs52Upgrade gtk3-immodule-ximUpgrade gnome-tweaksUpgrade gjs-develUpgrade vala-develUpgrade nautilus-develUpgrade mozjs60-develUpgrade mutterUpgrade gnome-menusUpgrade appstream-dataUpgrade gnome-online-accounts-develUpgrade gnome-terminalUpgrade clutterUpgrade evinceUpgrade accountsservice-develUpgrade LibRawUpgrade libxsltUpgrade gnome-softwareUpgrade mutter-devel | Jul 22, 2024 | Dec 18, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 21, 2018 |
| Redhat_linux | — | Upgrade gnome-terminal-debugsourceUpgrade accountsservice-debuginfoUpgrade clutterUpgrade gtk3-immodule-ximUpgrade mutterUpgrade gvfs-client-debuginfoUpgrade mozjs60Upgrade mozjs60-debugsourceUpgrade gnome-control-center-debugsourceUpgrade evince-libs-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade clutter-docUpgrade gjsUpgrade gnome-online-accounts-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade clutter-debugsourceUpgrade evince-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gnome-menus-debuginfoUpgrade gvfs-smbUpgrade mutter-debuginfoUpgrade gnome-control-center-filesystemUpgrade mutter-tests-debuginfoUpgrade gvfs-goa-debuginfoUpgrade accountsservice-libsUpgrade gnome-shell-debuginfoUpgrade gnome-session-debugsourceUpgrade libvncserver-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3-debugsourceUpgrade gvfs-goaUpgrade gjs-debuginfoUpgrade vinagre-debugsourceUpgrade clutter-tests-debuginfoUpgrade gnome-control-centerUpgrade gvfs-gphoto2-debuginfoUpgrade gdm-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-software-debugsourceUpgrade gvfs-afcUpgrade gvfs-clientUpgrade LibRaw-debuginfoUpgrade baobabUpgrade evince-nautilus-debuginfoUpgrade libxslt-debuginfoUpgrade accountsserviceUpgrade mozjs52-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade nautilus-extensionsUpgrade LibRawUpgrade vala-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gtk3Upgrade gvfs-afpUpgrade evince-nautilusUpgrade gnome-menus-debugsourceUpgrade vala-develUpgrade mozjs60-develUpgrade clutter-develUpgrade nautilus-debugsourceUpgrade clutter-debuginfoUpgrade mozjs52-develUpgrade gnome-sessionUpgrade mozjs52-devel-debuginfoUpgrade libxslt-develUpgrade gvfs-debuginfoUpgrade gjs-debugsourceUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade gtk3-devel-debuginfoUpgrade gvfs-mtpUpgrade gvfs-mtp-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-shellUpgrade evince-libsUpgrade gtk-update-icon-cache-debuginfoUpgrade nautilus-develUpgrade evinceUpgrade evince-debugsourceUpgrade valaUpgrade libvncserverUpgrade vinagreUpgrade libvncserver-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-archiveUpgrade vala-debugsourceUpgrade gtk3-develUpgrade libxslt-debugsourceUpgrade gvfs-develUpgrade libxsltUpgrade LibRaw-develUpgrade gjs-develUpgrade LibRaw-samples-debuginfoUpgrade libvncserver-develUpgrade gtk3-immodules-debuginfoUpgrade gnome-boxes-debuginfoUpgrade appstream-dataUpgrade gvfs-gphoto2Upgrade gnome-softwareUpgrade gnome-menus-develUpgrade gnome-online-accounts-develUpgrade gnome-session-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accountsUpgrade gnome-boxes-debugsourceUpgrade baobab-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-terminal-nautilusUpgrade nautilusUpgrade gvfs-archive-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-software-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-boxesUpgrade valadoc-debuginfoUpgrade gnome-terminalUpgrade gvfs-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade evince-browser-pluginUpgrade gvfs-afc-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade mutter-develUpgrade gnome-software-editorUpgrade gnome-shell-debugsourceUpgrade mutter-debugsourceUpgrade gvfsUpgrade gnome-menusUpgrade gvfs-fuseUpgrade vinagre-debuginfoUpgrade gvfs-smb-debuginfoUpgrade mozjs52Upgrade gvfs-afp-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade baobab-debugsourceUpgrade gdmUpgrade gtk3-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-tweaksUpgrade mozjs52-debuginfoUpgrade accountsservice-develUpgrade gsettings-desktop-schemasUpgrade gtk3-tests-debuginfoUpgrade accountsservice-libs-debuginfo | Apr 29, 2020 | Dec 21, 2018 |
| Rocky_linux | — | Upgrade clutter-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs60-debugsourceUpgrade mozjs52-debuginfoUpgrade clutter-docUpgrade clutter-debuginfoUpgrade mozjs60Upgrade baobab-debugsourceUpgrade gnome-menusUpgrade baobab-debuginfoUpgrade baobabUpgrade mozjs60-debuginfoUpgrade mozjs52-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade clutterUpgrade mozjs52 | Mar 12, 2024 | Dec 21, 2018 |
| Suse | — | Upgrade libraw-develUpgrade libraw-devel-staticUpgrade libraw-toolsUpgrade libraw16 | Jan 31, 2019 | Dec 21, 2018 |
| Ubuntu | — | Upgrade libraw16Upgrade libraw15 | May 22, 2019 | Dec 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub