Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-8366

Опубликовано: 14 янв. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

needed

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

9.28-2
disco

not-affected

9.28-2
eoan

not-affected

9.28-2
esm-apps/bionic

needed

esm-apps/focal

not-affected

9.28-2
esm-apps/jammy

not-affected

9.28-2
esm-apps/noble

not-affected

9.28-2

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

needed

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needs-triage

Показывать по

РелизСтатусПримечание
artful

not-affected

0.18.2-1
bionic

not-affected

0.18.2-1
cosmic

not-affected

0.18.2-1
devel

not-affected

0.18.2-1
disco

not-affected

0.18.2-1
eoan

not-affected

0.18.2-1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [0.15.4-1ubuntu0.1]]
esm-infra/bionic

not-affected

0.18.2-1
esm-infra/focal

not-affected

0.18.2-1
esm-infra/xenial

not-affected

0.17.1-1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

needed

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

0.22-3.1~build0.18.04.1
cosmic

not-affected

0.22-3.1~build0.18.04.1
devel

DNE

disco

not-affected

0.22-3.1~build0.18.04.1
eoan

DNE

esm-apps/bionic

not-affected

0.22-3.1~build0.18.04.1
esm-apps/xenial

needed

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/focal

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not present]]
esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

EPSS

Процентиль: 79%
0.01277
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
около 10 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVSS3: 9.8
nvd
около 6 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVSS3: 9.8
debian
около 6 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.1 ...

CVSS3: 9.8
github
больше 3 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

EPSS

Процентиль: 79%
0.01277
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Уязвимость CVE-2015-8366