libraw vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 9

• Unscored —
  CVE-2015-3885

  Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of ser…

  kodi dcraw libraw libraw Debian Ubuntu
  May 19, 2015
• Unscored —
  CVE-2015-8366

  Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause m…

  kodi dcraw libraw rawtherapee Debian Ubuntu Alpine
  Jan 14, 2020
• Unscored —
  CVE-2015-8367

  The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arb…

  kodi libraw rawtherapee exactimage Debian Ubuntu Alpine
  Jan 14, 2020
• Unscored —
  CVE-2017-13735

  There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will l…

  kodi dcraw libraw rawtherapee Debian Ubuntu Alpine
  Aug 29, 2017
• Unscored —
  CVE-2017-14265

  A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3…

  kodi dcraw libraw rawtherapee Debian Ubuntu Alpine
  Sep 11, 2017
• Unscored —
  CVE-2017-14348

  LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Sep 12, 2017
• Unscored —
  CVE-2017-14608

  In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c…

  kodi dcraw libraw rawtherapee Debian Ubuntu
  Sep 20, 2017
• Unscored —
  CVE-2017-6886

  An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exp…

  LibRaw LibRaw kodi dcraw Debian Ubuntu Alpine
  May 16, 2017
• Unscored —
  CVE-2017-6887

  A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 ca…

  LibRaw LibRaw kodi dcraw Debian Ubuntu Alpine
  May 16, 2017

References

• report
  https://ubuntu.com/security/CVE-2015-3885
• report
  https://ubuntu.com/security/CVE-2015-8366
• report
  https://ubuntu.com/security/CVE-2015-8367
• report
  https://ubuntu.com/security/CVE-2017-6886
• report
  https://ubuntu.com/security/CVE-2017-6887
• report
  https://ubuntu.com/security/CVE-2017-13735
• report
  https://ubuntu.com/security/CVE-2017-14265
• report
  https://ubuntu.com/security/CVE-2017-14348
• report
  https://ubuntu.com/security/CVE-2017-14608