vulnerability

Rocky Linux: CVE-2018-20337: GNOME (RLSA-2020-1766)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 21, 2018
Added
Mar 12, 2024
Modified
Aug 13, 2025

Description

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

Solutions

rocky-upgrade-baobabrocky-upgrade-baobab-debuginforocky-upgrade-baobab-debugsourcerocky-upgrade-clutterrocky-upgrade-clutter-debuginforocky-upgrade-clutter-debugsourcerocky-upgrade-clutter-develrocky-upgrade-clutter-docrocky-upgrade-gnome-menusrocky-upgrade-gnome-menus-debuginforocky-upgrade-gnome-menus-debugsourcerocky-upgrade-gnome-menus-develrocky-upgrade-mozjs52rocky-upgrade-mozjs52-debuginforocky-upgrade-mozjs52-debugsourcerocky-upgrade-mozjs52-develrocky-upgrade-mozjs52-devel-debuginforocky-upgrade-mozjs60rocky-upgrade-mozjs60-debuginforocky-upgrade-mozjs60-debugsourcerocky-upgrade-mozjs60-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.