CVE-2017-13735

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras.

Security Fix(es):

(CVE-2017-13735)

(CVE-2017-14608)

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras.

Security Fix(es):

(CVE-2017-13735)

(CVE-2017-14608)

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras.

Security Fix(es):

(CVE-2017-13735)

(CVE-2017-14608)

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras.

Security Fix(es):

(CVE-2017-13735)

(CVE-2017-14608)

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack. (CVE-2017-13735)

A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack. (CVE-2017-14265)

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file. (CVE-2017-14348)

It was discovered that rawtherapee had a floating point exception in the kodak_radc_load_raw function in dcraw.cc (CVE-2017-13735).

It was discovered that rawtherapee had a Heap-based 1 byte buffer overflow in the processCanonCameraInfo function in dcraw.c (CVE-2017-14348).

It was discovered that rawtherapee had a Stack Buffer Overflow in xtrans_interpolate in dcraw.c that could allow a remote denial of service and code execution attack (CVE-2017-14265).

The updated packages fix security vulnerabilities:

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack. (CVE-2017-13735)

In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/ dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash. (CVE-2017-14608)

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file. (CVE-2018-19655)

There is a floating point exception in dcraw_common.cpp of libRAW. It will lead to remote denial of service attack. This code is embedded in rawtherapee (CVE-2017-13735).

These are all security issues fixed in the dcraw-9.28.0-1.6 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libraw-devel-0.20.2-4.1 package on the GA media of openSUSE Tumbleweed.

This update for libraw fixes the following issues:

Security issues fixed:

• CVE-2017-13735: A floating point exception in kodak_radc_load_raw could be used by attackers to crash a libraw using application (bsc#1060321)
• CVE-2017-14608: An out-of-bounds read in the kodak_65000_load_raw function could be used for crashing or information leak from the libraw library (bsc#1063798)
• CVE-2017-16909: Fix heap-buffer overflow in the LibRaw::panasonic_load_raw() function (bsc#1072385).

This update for dcraw fixes the following issues:

• CVE-2017-13735: Fixed a denial of service issue due to a floating point exception (bsc#1056170).
• CVE-2017-14608: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1063798).
• CVE-2018-19655: Fixed a buffer overflow that could lead to an application crash (bsc#1117896).
• CVE-2018-5801: Fixed an invalid memory access that could lead to denial of service (bsc#1084690).
• CVE-2018-5805: Fixed a buffer overflow that could lead to an application crash (bsc#1097973).
• CVE-2018-5806: Fixed an invalid memory access that could lead to denial of service (bsc#1097974).
• CVE-2018-19565: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117622).
• CVE-2018-19566: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117517).
• CVE-2018-19567: Fixed a denial of service issue due to a floating point exception (bsc#1117512).
• CVE-2018-19568: Fixed a denial of service issue due to a floating point exception (bsc#1117436).
• CVE-2021-3624: Fixed a buffer overflow that could lead to code execution or denial of service (bsc#1189642).

Non-security fixes:

• Updated to version 9.28.0.

This update for dcraw fixes the following issues:

• CVE-2017-13735: Fixed a denial of service issue due to a floating point exception (bsc#1056170).
• CVE-2017-14608: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1063798).
• CVE-2018-19655: Fixed a buffer overflow that could lead to an application crash (bsc#1117896).
• CVE-2018-5801: Fixed an invalid memory access that could lead to denial of service (bsc#1084690).
• CVE-2018-5805: Fixed a buffer overflow that could lead to an application crash (bsc#1097973).
• CVE-2018-5806: Fixed an invalid memory access that could lead to denial of service (bsc#1097974).
• CVE-2018-19565: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117622).
• CVE-2018-19566: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117517).
• CVE-2018-19567: Fixed a denial of service issue due to a floating point exception (bsc#1117512).
• CVE-2018-19568: Fixed a denial of service issue due to a floating point exception (bsc#1117436).
• CVE-2021-3624: Fixed a buffer overflow that could lead to code execution or denial of service (bsc#1189642).

Non-security fixes:

• Updated to version 9.28.0.

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code