PT-2017-17398 · Libraw+1 · Libraw-Demosaic-Pack-Gpl2+1

Publicado 2017-05-15 · Atualizado 2024-06-15 · CVE-2017-6890

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibRaw-demosaic-pack-GPL2 versions prior to 0.18.2

Description A boundary error in the foveon load camf() function, located in dcraw foveon.c, can cause a stack-based buffer overflow when initializing a huffman table.

Recommendations For versions prior to 0.18.2, update to version 0.18.2 or later to resolve the issue. As a temporary workaround, consider disabling the foveon load camf() function until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-6890

MGASA-2017-0223

OPENSUSE-SU-2024:10980-1

SUSE-SU-2017:2300-1

Produtos afetados

Libraw-Demosaic-Pack-Gpl2

Suse

Referências · 34

• https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716 · Correção
• https://bugzilla.suse.com/930683 · Nota
• https://advisories.mageia.org/MGASA-2017-0223.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-6899 · Nota
• https://suse.com/security/cve/CVE-2015-3885 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=21004 · Nota
• https://suse.com/security/cve/CVE-2017-6889 · Nota
• https://suse.com/security/cve/CVE-2018-5819 · Nota
• https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html · Nota
• https://suse.com/security/cve/CVE-2015-8367 · Nota
• https://suse.com/security/cve/CVE-2017-14265 · Nota
• https://suse.com/security/cve/CVE-2018-10529 · Nota
• https://suse.com/security/cve/CVE-2017-14348 · Nota
• https://suse.com/security/cve/CVE-2017-6890 · Nota
• https://bugzilla.suse.com/1039379 · Nota