Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-19655

Опубликовано: 18 авг. 2018
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5dcrawNot affected
Red Hat Enterprise Linux 6dcrawWill not fix
Red Hat Enterprise Linux 7dcrawFix deferred
Red Hat Enterprise Linux 8dcrawFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1656773dcraw: Stack-based buffer overflow in the find_green() function

EPSS

Процентиль: 71%
0.00689
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

CVSS3: 8.8
nvd
около 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

CVSS3: 8.8
debian
около 7 лет назад

A stack-based buffer overflow in the find_green() function of dcraw th ...

CVSS3: 8.8
github
больше 3 лет назад

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

suse-cvrf
больше 3 лет назад

Security update for dcraw

EPSS

Процентиль: 71%
0.00689
Низкий

3.3 Low

CVSS3