Lucene search
Alpine Linux Development TeamALPINE:CVE-2020-35533HistorySep 01, 2022 - 6:15 p.m.
CVE-2020-35533
2022-09-0118:15:08
Alpine Linux Development Team
security.alpinelinux.org
30
libraw
out-of-bounds read
adobe_copy_pixel
image file vulnerability
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
27.8%
In LibRaw, an out-of-bounds read vulnerability exists within the “LibRaw::adobe_copy_pixel()” function (libraw\src\decoders\dng.cpp) when reading data from the image file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | libraw | < 0.20.0-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | libraw | < 0.20.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | libraw | < 0.20.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | libraw | < 0.20.0-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | libraw | < 0.20.0-r0 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2022-09-01 18:15:00
ubuntucve
ubuntucve
CVE-2020-35533
2022-09-01 00:00:00
veracode
veracode
Out-of-Bounds Read
2022-11-02 01:16:37
cvelist
cvelist
CVE-2020-35533
2022-09-01 17:54:32
osv
osv
CVE-2020-35533
2022-09-01 18:15:08
libraw - security update
2022-09-16 00:00:00
libraw vulnerabilities
2022-11-07 16:57:39
cve
cve
CVE-2020-35533
2022-09-01 18:15:08
nvd
nvd
CVE-2020-35533
2022-09-01 18:15:08
redhatcve
redhatcve
CVE-2020-35533
2022-08-29 21:42:51
debiancve
debiancve
CVE-2020-35533
2022-09-01 18:15:08
nessus
nessus
Amazon Linux 2 : LibRaw (ALAS-2023-2234)
2023-09-08 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : LibRaw vulnerabilities (USN-5715-1)
2022-11-08 00:00:00
RHEL 6 : libraw (Unpatched Vulnerability)
2024-05-11 00:00:00
amazon
amazon
Medium: LibRaw
2023-08-31 22:29:00
openvas
openvas
Debian: Security Advisory (DLA-3113-1)
2022-09-17 00:00:00
Ubuntu: Security Advisory (USN-5715-1)
2022-11-08 00:00:00
debian
debian
[SECURITY] [DLA 3113-1] libraw security update
2022-09-16 10:28:18
ubuntu
ubuntu
LibRaw vulnerabilities
2022-11-07 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2474
2024-09-03 12:11:57
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
27.8%
Related for ALPINE:CVE-2020-35533