Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-35530

Опубликовано: 03 апр. 2020
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

A vulnerability was found in LibRaw. An out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) can be triggered via a crafted X3F file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libraw1394Out of support scope
Red Hat Enterprise Linux 7libkdcrawOut of support scope
Red Hat Enterprise Linux 7LibRawOut of support scope
Red Hat Enterprise Linux 7libraw1394Out of support scope
Red Hat Enterprise Linux 8LibRawNot affected
Red Hat Enterprise Linux 8libraw1394Not affected
Red Hat Enterprise Linux 8libreoffice:flatpak/libraw1394Not affected
Red Hat Enterprise Linux 9LibRawNot affected
Red Hat Enterprise Linux 9libreoffice:flatpak/libraw1394Not affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2122339LibRaw: Out of bounds write in new_node() function

EPSS

Процентиль: 26%
0.00091
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

CVSS3: 5.5
nvd
больше 3 лет назад

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

CVSS3: 5.5
debian
больше 3 лет назад

In LibRaw, there is an out-of-bounds write vulnerability within the "n ...

CVSS3: 5.5
github
больше 3 лет назад

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость функции new_node() (libraw\src\x3f\x3f_utils_patched.cpp) библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 26%
0.00091
Низкий

5.5 Medium

CVSS3