Rapid7

vulnerability

SUSE: CVE-2017-6886: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
May 16, 2017
Added
May 31, 2017
Modified
Jun 20, 2021

Description

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

Solutions

suse-upgrade-libraw-develsuse-upgrade-libraw-devel-staticsuse-upgrade-libraw16suse-upgrade-libraw9
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.