Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-19655

Опубликовано: 18 авг. 2018
Источник: redhat
CVSS3: 3.3

Описание

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5dcrawNot affected
Red Hat Enterprise Linux 6dcrawWill not fix
Red Hat Enterprise Linux 7dcrawFix deferred
Red Hat Enterprise Linux 8dcrawFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1656773dcraw: Stack-based buffer overflow in the find_green() function

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

CVSS3: 8.8
nvd
больше 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

CVSS3: 8.8
debian
больше 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw th ...

CVSS3: 8.8
github
больше 4 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

suse-cvrf
больше 4 лет назад

Security update for dcraw

3.3 Low

CVSS3