Lucene search
Veracode Vulnerability DatabaseVERACODE:25274HistoryMay 10, 2020 - 11:23 p.m.
Arbitrary Code Execution
2020-05-1023:23:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
EPSS
0.01
Percentile
83.3%
libraw is vulnerable to arbitrary code execution. The vulnerability exists as an array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.
Related
freebsd
freebsd
libraw -- index overflow in smal_decode_segment
2015-11-30 00:00:00
prion
prion
Code injection
2020-01-14 16:15:00
alpinelinux
alpinelinux
CVE-2015-8366
2020-01-14 16:15:11
cve
cve
CVE-2015-8366
2020-01-14 16:15:11
osv
osv
CVE-2015-8366
2020-01-14 16:15:11
debiancve
debiancve
CVE-2015-8366
2020-01-14 16:15:11
ubuntucve
ubuntucve
CVE-2015-8366
2015-12-02 00:00:00
nessus
nessus
FreeBSD : libraw -- index overflow in smal_decode_segment (db04bf07-9cc8-11e5-8c2b-c335fa8985d7)
2015-12-08 00:00:00
Fedora 22 : LibRaw-0.16.2-3.fc22 (2015-a288773b9a)
2016-03-04 00:00:00
Fedora 23 : LibRaw-0.16.2-3.fc23 (2015-d2fc332108)
2016-03-04 00:00:00
cvelist
cvelist
CVE-2015-8366
2020-01-14 15:19:52
nvd
nvd
CVE-2015-8366
2020-01-14 16:15:11
fedora
fedora
[SECURITY] Fedora 23 Update: LibRaw-0.16.2-3.fc23
2015-12-07 20:31:39
[SECURITY] Fedora 22 Update: LibRaw-0.16.2-3.fc22
2015-12-12 01:57:39
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0469)
2015-12-11 00:00:00
Ubuntu: Security Advisory (USN-3492-1)
2017-11-23 00:00:00
mageia
mageia
Updated libraw packages fix security vulnerabilities
2015-12-10 23:57:35
gentoo
gentoo
LibRaw: Multiple vulnerabilities
2017-01-24 00:00:00
ubuntu
ubuntu
LibRaw vulnerabilities
2017-11-22 00:00:00