Skip to content
OpenAdvisories
High · 7.8 CVE-2021-32142 EUVD-2021-19000GHSA-2vqp-59qv-pmrc

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(ch…

Published Feb 17, 2023 · Updated Mar 19, 2025 · Assigned by mitre

Package: darktable Package: dcraw Package: digikam Package: exactimage Package: kodi Package: libraw Package: libraw Package: LibRaw Package: rawtherapee Package: ufraw Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 libraw 0.20.2-2.1 —
Debian 13 libraw 0.20.2-2.1 —
Debian 12 libraw 0.20.2-2.1 —
Debian 11 libraw 0.20.2-1+deb11u1 DSA-5412-1
Debian 10 libraw 0.19.2-2+deb10u3 DLA-3433-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 kodi +4 No fix yet —
Ubuntu 26.04 LTS kodi +4 No fix yet —
Ubuntu 25.10 kodi +4 No fix yet —
Ubuntu 24.04 LTS kodi +4 No fix yet —
Ubuntu 22.04 LTS kodi +4 No fix yet —
Ubuntu 22.04 LTS libraw 0.20.2-2ubuntu2.22.04.1 USN-6137-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS kodi +4 No fix yet —
Ubuntu 20.04 LTS libraw 0.19.5-1ubuntu1.2 USN-6137-1
Ubuntu 18.04 LTS kodi +5 No fix yet —
Ubuntu 16.04 LTS kodi +5 No fix yet —
Ubuntu Pro 22.04 LTS digikam 4:7.5.0-3ubuntu0.1~esm1 USN-7266-1
Ubuntu Pro 20.04 LTS digikam 4:6.4.0+dfsg-3ubuntu0.1~esm1 USN-7266-1
Ubuntu Pro 18.04 LTS digikam 4:5.6.0-0ubuntu10+esm1 USN-7266-1
Ubuntu Pro 18.04 LTS libraw No fix yet —
Ubuntu Pro 16.04 LTS digikam 4:4.12.0-0ubuntu7+esm1 USN-7266-1
Ubuntu Pro 16.04 LTS libraw No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 LibRaw +1 0.20.2-6.el9 RHSA-2023:6343
RHEL 8 LibRaw +1 0.19.5-4.el8 RHSA-2024:2994
RHEL 7 LibRaw +2 0.19.4-2.el7_9 RHSA-2024:0343

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 LibRaw +1 0.20.2-6.el9 ALSA-2023:6343
AlmaLinux 8 LibRaw +1 0.19.5-4.el8 ALSA-2024:2994

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 LibRaw 0.19.5-4.el8 RLSA-2024:2994

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 libraw 0.18.9-150000.3.17.1 SUSE-SU-2023:0512-1, SUSE-SU-2023:0511-1
SLES 12 SP5 libraw 0.15.4-36.1 SUSE-SU-2023:0510-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.4 libraw 0.18.9-150000.3.17.1 SUSE-SU-2023:0512-1, SUSE-SU-2023:0511-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 LibRaw +2 0.19.4-1.amzn2.0.2 ALAS2-2023-2256

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 LibRaw 0.21.3-1 —
Azure Linux 2 (CBL-Mariner) LibRaw No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 LibRaw +1 0.20.2-6.el9 ELSA-2023-6343
Oracle Linux 8 LibRaw +1 0.19.5-4.el8 ELSA-2024-2994
Oracle Linux 7 LibRaw +2 0.19.4-2.el7_9 ELSA-2024-0343

Advisories 18

References