There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutterUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade mozjs52Upgrade accountsservice-develUpgrade mozjs60Upgrade gjs-develUpgrade clutter-develUpgrade gnome-tweaksUpgrade mozjs52-develUpgrade valaUpgrade gnome-menusUpgrade baobabUpgrade clutter-docUpgrade vala-devel | May 4, 2022 | Dec 21, 2018 |
| Centos_linux | — | Upgrade gvfs-gphoto2Upgrade gnome-shell-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemon-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-software-debugsourceUpgrade mutter-debugsourceUpgrade gvfs-clientUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsserviceUpgrade gnome-software-editorUpgrade gjs-tests-debuginfoUpgrade gvfs-archive-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade gnome-session-xsessionUpgrade gjs-debugsourceUpgrade baobab-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-menus-debugsourceUpgrade LibRawUpgrade baobabUpgrade gdmUpgrade mozjs52-debugsourceUpgrade gnome-online-accounts-develUpgrade clutter-tests-debuginfoUpgrade libxsltUpgrade gnome-terminalUpgrade accountsservice-debugsourceUpgrade nautilus-debugsourceUpgrade nautilus-debuginfoUpgrade libxslt-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gnome-menusUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs52Upgrade vinagre-debugsourceUpgrade mozjs52-debuginfoUpgrade evinceUpgrade mutter-tests-debuginfoUpgrade gtk3-debugsourceUpgrade mutter-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-boxesUpgrade gnome-remote-desktop-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-softwareUpgrade gvfs-archiveUpgrade gtk3-immodule-ximUpgrade baobab-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gtk3-debuginfoUpgrade evince-debuginfoUpgrade gnome-shell-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gsettings-desktop-schemasUpgrade gjs-debuginfoUpgrade vinagre-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade clutterUpgrade mutterUpgrade gvfs-afp-debuginfoUpgrade gvfs-develUpgrade nautilusUpgrade gvfs-mtpUpgrade gvfs-afcUpgrade gnome-session-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-remote-desktopUpgrade libvncserverUpgrade accountsservice-debuginfoUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade gjsUpgrade accountsservice-libsUpgrade gvfs-fuse-debuginfoUpgrade mozjs60Upgrade vinagreUpgrade gnome-terminal-nautilusUpgrade gnome-terminal-debugsourceUpgrade gtk-update-icon-cacheUpgrade nautilus-extensions-debuginfoUpgrade LibRaw-debuginfoUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade mozjs60-debugsourceUpgrade gvfs-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debuginfoUpgrade gvfsUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-tweaksUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-software-debuginfoUpgrade libvncserver-debugsourceUpgrade gdm-debugsourceUpgrade gvfs-fuseUpgrade gnome-software-editor-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-session-debuginfoUpgrade clutter-debuginfoUpgrade evince-debugsourceUpgrade clutter-debugsourceUpgrade libxslt-develUpgrade mozjs60-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-terminal-debuginfoUpgrade evince-libsUpgrade gnome-boxes-debuginfoUpgrade libxslt-debuginfoUpgrade gtk3-devel-debuginfoUpgrade nautilus-extensionsUpgrade appstream-dataUpgrade gvfs-afpUpgrade gtk3-develUpgrade gvfs-smbUpgrade gvfs-goaUpgrade LibRaw-debugsourceUpgrade gtk3Upgrade gdm-debuginfoUpgrade gnome-online-accountsUpgrade gvfs-debuginfoUpgrade gtk3-tests-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-client-debuginfo | Apr 29, 2020 | Dec 21, 2018 |
| Debian | — | Upgrade libraw | Jul 30, 2024 | Dec 21, 2018 |
| Oracle_linux | — | Upgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade gnome-settings-daemonUpgrade evince-nautilusUpgrade gnome-boxesUpgrade gnome-sessionUpgrade mozjs52-develUpgrade libxslt-develUpgrade mozjs60Upgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade nautilusUpgrade gjsUpgrade gnome-terminal-nautilusUpgrade gnome-online-accountsUpgrade gnome-menus-develUpgrade gnome-software-editorUpgrade gnome-remote-desktopUpgrade evince-browser-pluginUpgrade libvncserverUpgrade evince-libsUpgrade nautilus-extensionsUpgrade accountsservice-libsUpgrade gnome-control-centerUpgrade valaUpgrade gnome-shellUpgrade clutter-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-filesystemUpgrade gnome-online-accounts-develUpgrade accountsservice-develUpgrade mozjs52Upgrade accountsserviceUpgrade gnome-terminalUpgrade clutterUpgrade vala-develUpgrade gjs-develUpgrade mutterUpgrade nautilus-develUpgrade evinceUpgrade gnome-tweaksUpgrade gtk3-immodule-ximUpgrade clutter-docUpgrade gnome-session-wayland-sessionUpgrade gtk3Upgrade libvncserver-develUpgrade gnome-menusUpgrade gnome-softwareUpgrade mozjs60-develUpgrade libxsltUpgrade appstream-dataUpgrade gdmUpgrade LibRawUpgrade vinagreUpgrade mutter-develUpgrade gsettings-desktop-schemas | Jul 22, 2024 | Dec 18, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 21, 2018 |
| Redhat_linux | — | Upgrade accountsserviceUpgrade gtk3-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gtk3Upgrade nautilus-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gvfs-afpUpgrade gnome-control-center-debugsourceUpgrade vala-develUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs60-develUpgrade gvfs-goa-debuginfoUpgrade gnome-control-centerUpgrade gnome-menus-debugsourceUpgrade clutter-docUpgrade evince-nautilusUpgrade gnome-settings-daemonUpgrade mozjs52-debugsourceUpgrade nautilus-extensionsUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-software-debugsourceUpgrade clutter-debuginfoUpgrade mozjs52-develUpgrade clutter-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade clutter-develUpgrade LibRaw-debuginfoUpgrade gdm-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-session-debugsourceUpgrade mozjs60Upgrade gnome-menus-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-control-center-filesystemUpgrade gvfs-client-debuginfoUpgrade gjs-debugsourceUpgrade libxslt-debuginfoUpgrade gtk3-devel-debuginfoUpgrade baobabUpgrade gvfs-fuse-debuginfoUpgrade LibRaw-debugsourceUpgrade mutterUpgrade libvncserver-debugsourceUpgrade accountsservice-libsUpgrade vinagre-debugsourceUpgrade LibRawUpgrade gnome-terminal-debuginfoUpgrade mutter-tests-debuginfoUpgrade libxslt-develUpgrade gnome-sessionUpgrade clutter-tests-debuginfoUpgrade gjsUpgrade clutterUpgrade gtk3-immodule-ximUpgrade vala-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-goaUpgrade gnome-session-xsessionUpgrade gvfs-afcUpgrade gvfs-smbUpgrade gsettings-desktop-schemas-develUpgrade gvfs-clientUpgrade evince-libs-debuginfoUpgrade evince-debuginfoUpgrade gjs-debuginfoUpgrade evince-browser-pluginUpgrade baobab-debugsourceUpgrade vinagreUpgrade nautilus-develUpgrade gdm-debugsourceUpgrade mozjs60-debuginfoUpgrade LibRaw-develUpgrade gnome-menusUpgrade accountsservice-debugsourceUpgrade gnome-software-editorUpgrade evinceUpgrade gnome-boxes-debugsourceUpgrade gvfs-archive-debuginfoUpgrade vala-debugsourceUpgrade appstream-dataUpgrade gvfs-archiveUpgrade gnome-boxes-debuginfoUpgrade gnome-shell-debugsourceUpgrade baobab-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-session-debuginfoUpgrade gsettings-desktop-schemasUpgrade mozjs52-debuginfoUpgrade accountsservice-develUpgrade gjs-develUpgrade nautilus-extensions-debuginfoUpgrade gnome-control-center-debuginfoUpgrade evince-debugsourceUpgrade gnome-terminalUpgrade gvfs-mtp-debuginfoUpgrade mozjs52Upgrade gvfs-smb-debuginfoUpgrade vinagre-debuginfoUpgrade gnome-online-accounts-develUpgrade accountsservice-libs-debuginfoUpgrade libvncserver-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-fuseUpgrade gvfs-gphoto2Upgrade gvfs-afp-debuginfoUpgrade valaUpgrade libvncserverUpgrade nautilusUpgrade evince-browser-plugin-debuginfoUpgrade gnome-boxesUpgrade mutter-develUpgrade nautilus-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gvfsUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-terminal-nautilusUpgrade gdmUpgrade valadoc-debuginfoUpgrade gvfs-debugsourceUpgrade gtk3-develUpgrade libxslt-debugsourceUpgrade gnome-shellUpgrade gnome-menus-develUpgrade libxsltUpgrade gnome-online-accountsUpgrade mutter-debugsourceUpgrade gnome-softwareUpgrade libvncserver-develUpgrade gvfs-mtpUpgrade gtk3-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gvfs-develUpgrade gjs-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade evince-libsUpgrade gnome-tweaksUpgrade gvfs-afc-debuginfo | Apr 29, 2020 | Dec 21, 2018 |
| Rocky_linux | — | Upgrade gnome-menus-develUpgrade clutterUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-develUpgrade mozjs52-debugsourceUpgrade mozjs60-debuginfoUpgrade mozjs60-develUpgrade clutter-develUpgrade mozjs52Upgrade clutter-docUpgrade clutter-debugsourceUpgrade mozjs60-debugsourceUpgrade baobabUpgrade mozjs60Upgrade gnome-menusUpgrade baobab-debugsourceUpgrade mozjs52-debuginfoUpgrade gnome-menus-debuginfoUpgrade baobab-debuginfoUpgrade clutter-debuginfoUpgrade gnome-menus-debugsource | Mar 12, 2024 | Dec 21, 2018 |
| Suse | — | Upgrade libraw-toolsUpgrade libraw16Upgrade libraw-develUpgrade libraw-devel-static | Jan 31, 2019 | Dec 21, 2018 |
| Ubuntu | — | Upgrade libraw16Upgrade libraw15 | May 22, 2019 | Dec 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub