CVE-2017-6886

Опубликовано: 16 мая 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

Ссылки

http://www.debian.org/security/2017/dsa-3950
http://www.securityfocus.com/bid/98605
Third Party Advisory
VDB Entry
https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/75737/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/
Permissions Required
Third Party Advisory
http://www.debian.org/security/2017/dsa-3950
http://www.securityfocus.com/bid/98605
Third Party Advisory
VDB Entry
https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/75737/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

Версия до 0.18.1 (включая)

EPSS

Процентиль: 68%

0.0058

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-6886

CVSS3: 9.8

ubuntu

больше 8 лет назад

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

CVE-2017-6886

CVSS3: 3.3

redhat

больше 8 лет назад

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

CVE-2017-6886

CVSS3: 9.8

debian

больше 8 лет назад

An error within the "parse_tiff_ifd()" function (internal/dcraw_common ...

GHSA-rcgw-xxcv-r49v

CVSS3: 9.8

github

больше 3 лет назад

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

openSUSE-SU-2017:1460-1

suse-cvrf

больше 8 лет назад

Security update for libraw

EPSS

Процентиль: 68%

0.0058

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119