Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3885
HistoryMay 19, 2015 - 12:00 a.m.

CVE-2015-3885

2015-05-1900:00:00
ubuntu.com
ubuntu.com
16

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.048

Percentile

92.7%

Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier
allows remote attackers to cause a denial of service (crash) via a crafted
image, which triggers a buffer overflow, related to the len variable.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchdcraw< anyUNKNOWN
ubuntu14.04noarchfreeimage< 3.15.4-3ubuntu0.1+esm2UNKNOWN
ubuntu24.04noarchkodi< anyUNKNOWN
ubuntu16.04noarchkodi< anyUNKNOWN
ubuntu14.04noarchlibraw< 0.15.4-1ubuntu0.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.048

Percentile

92.7%