Описание
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | dcraw | Not affected | ||
| Red Hat Enterprise Linux 6 | dcraw | Will not fix | ||
| Red Hat Enterprise Linux 7 | dcraw | Fix deferred | ||
| Red Hat Enterprise Linux 8 | dcraw | Fix deferred |
Показывать по
Дополнительная информация
Статус:
4.4 Medium
CVSS3
Связанные уязвимости
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could b ...
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
ALT-PU-2018-1857: package `dcraw` update to version 9.28.0-alt1
4.4 Medium
CVSS3