Lucene search
Gentoo FoundationGLSA-201701-54HistoryJan 23, 2017 - 12:00 a.m.
DCRaw: Buffer overflow
2017-01-2300:00:00
Gentoo Foundation
security.gentoo.org
43
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.048
Percentile
92.7%
Background
Command-line decoder for raw digital photos.
Description
An integer overflow was discovered in the ljpeg_start function in DCRaw.
Impact
Remote attackers, by enticing a user to open a specially crafted image, could cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All DCRaw users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-gfx/dcraw-9.26.0"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | media-gfx/dcraw | < 9.26.0 | UNKNOWN |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0226)
2022-01-28 00:00:00
Fedora Update for mingw-LibRaw FEDORA-2015-8266
2015-06-09 00:00:00
Debian: Security Advisory (DLA-228-1)
2023-03-08 00:00:00
osv
osv
libraw - security update
2015-06-10 00:00:00
exactimage - security update
2015-05-28 00:00:00
nessus
nessus
Fedora 20 : ufraw-0.21-1.fc20 (2015-8706)
2015-06-09 00:00:00
Fedora 21 : LibRaw-0.16.2-1.fc21 (2015-8482)
2015-05-29 00:00:00
Fedora 21 : dcraw-9.25.0-2.fc21 (2015-8647)
2015-06-09 00:00:00
freebsd
freebsd
dcraw -- integer overflow condition
2015-04-24 00:00:00
debian
debian
[SECURITY] [DLA 241-1] libraw security update
2015-06-10 12:10:03
[SECURITY] [DLA 243-1] libraw security update
2015-06-10 20:19:19
[SECURITY] [DLA 228-1] exactimage security update
2015-05-28 07:13:44
fedora
fedora
[SECURITY] Fedora 21 Update: rawstudio-2.1-0.1.20150511git983bda1.fc21
2015-07-18 01:58:47
[SECURITY] Fedora 21 Update: ufraw-0.21-1.fc21
2015-06-05 23:43:52
[SECURITY] Fedora 20 Update: LibRaw-0.15.4-2.fc20
2015-05-26 03:37:12
veracode
veracode
Buffer Overflow
2023-12-28 15:12:15
mageia
mageia
Updated darktable packages fix CVE-2015-3885
2015-05-13 20:18:54
Updated ufraw & dcraw packages fix CVE-2015-3885
2015-05-13 20:18:54
Updated rawtherapee packages fix CVE-2015-3885
2015-05-13 20:18:54
prion
prion
Integer overflow
2015-05-19 18:59:00
debiancve
debiancve
CVE-2015-3885
2015-05-19 18:59:07
cve
cve
CVE-2015-3885
2015-05-19 18:59:07
nvd
nvd
CVE-2015-3885
2015-05-19 18:59:07
cvelist
cvelist
CVE-2015-3885
2015-05-19 18:00:00
ubuntucve
ubuntucve
CVE-2015-3885
2015-05-19 00:00:00
gentoo
gentoo
Kodi: Multiple vulnerabilities
2017-06-20 00:00:00
LibRaw: Multiple vulnerabilities
2017-01-24 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2017-11-22 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.048
Percentile
92.7%
Related for GLSA-201701-54