CVE-2020-24889

Опубликовано: 16 сент. 2020

Источник: debian

Описание

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
libraw	fixed	0.20.2-1		package
libraw	not-affected		buster	package
libraw	not-affected		stretch	package

Примечания

https://github.com/LibRaw/LibRaw/issues/334
https://github.com/LibRaw/LibRaw/commit/78d323ecbe6a9752aee6e97118a76d40704d73ee

Связанные уязвимости

CVE-2020-24889

CVSS3: 7.8

ubuntu

почти 6 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

CVE-2020-24889

CVSS3: 5.3

redhat

около 6 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

CVE-2020-24889

CVSS3: 7.8

nvd

почти 6 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

GHSA-8977-8gpx-7fcv

CVSS3: 7.8

github

больше 4 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.