Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-24890

Опубликовано: 16 сент. 2020
Источник: debian

Описание

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way

Пакеты

ПакетСтатусВерсия исправленияРелизТип
librawunfixedpackage

Примечания

  • https://github.com/LibRaw/LibRaw/issues/335

  • https://github.com/LibRaw/LibRaw/issues/335#issuecomment-677637276

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way

CVSS3: 5.3
redhat
больше 5 лет назад

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way

CVSS3: 5.5
nvd
больше 5 лет назад

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way

CVSS3: 5.5
github
больше 3 лет назад

libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution.