CVE-2013-2127

2013-08-1415:55:06

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

libraw

exposure correction

denial of service

arbitrary code

unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.01

Percentile

84.0%

JSON

Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian12alldarktable< 4.2.1-4darktable_4.2.1-4_all.deb
Debian11alldarktable< 3.4.1-5darktable_3.4.1-5_all.deb
Debian999alldarktable< 4.8.1-2darktable_4.8.1-2_all.deb
Debian13alldarktable< 4.8.1-2darktable_4.8.1-2_all.deb
Debian12alllibraw< 0.20.2-2.1libraw_0.20.2-2.1_all.deb
Debian11alllibraw< 0.20.2-1+deb11u1libraw_0.20.2-1+deb11u1_all.deb
Debian999alllibraw< 0.21.2-2.1libraw_0.21.2-2.1_all.deb
Debian13alllibraw< 0.21.2-2.1libraw_0.21.2-2.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	darktable	< 4.2.1-4	darktable_4.2.1-4_all.deb
Debian	11	all	darktable	< 3.4.1-5	darktable_3.4.1-5_all.deb
Debian	999	all	darktable	< 4.8.1-2	darktable_4.8.1-2_all.deb
Debian	13	all	darktable	< 4.8.1-2	darktable_4.8.1-2_all.deb
Debian	12	all	libraw	< 0.20.2-2.1	libraw_0.20.2-2.1_all.deb
Debian	11	all	libraw	< 0.20.2-1+deb11u1	libraw_0.20.2-1+deb11u1_all.deb
Debian	999	all	libraw	< 0.21.2-2.1	libraw_0.21.2-2.1_all.deb
Debian	13	all	libraw	< 0.21.2-2.1	libraw_0.21.2-2.1_all.deb