Libraw Vulnerabilidad

Cronología

El año pasado

Versión

0.18.024
0.18.124
0.18.221
0.18.319
0.18.418

Contramedidas

Official Fix50
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined53

Vector de acceso

Not Defined0
Physical0
Local3
Adjacent4
Network46

Autenticación

Not Defined0
High0
Low4
None49

La interacción del usuario

Not Defined0
Required36
None17

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤30
≤40
≤55
≤618
≤79
≤813
≤98
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤55
≤618
≤711
≤812
≤97
≤100

VulDB

≤10
≤20
≤30
≤40
≤517
≤69
≤716
≤810
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤67
≤715
≤88
≤911
≤107

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k3
<2k42
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k53
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (52): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.13.1, 0.13.2, 0.13.3, 0.13.4, 0.13.5, 0.13.6, 0.13.7, 0.13.8, 0.14, 0.14.1, 0.14.2, 0.14.3, 0.14.4, 0.14.5, 0.14.6, 0.14.7, 0.15, 0.15.1, 0.15.2, 0.15.3, 0.16, 0.17, 0.18, 0.18.1, 0.18.2, 0.18.3, 0.18.4, 0.18.5, 0.18.6, 0.18.7, 0.18.8, 0.18.9, 0.18.11, 0.19, 0.19.1, 0.20, 0.20-Beta2, 19.0, 20.0

Tipo de software: Image Processing Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-08-236.06.0LibRaw aspect_ratio.cpp stretch desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2020-22628
2023-04-228.58.4Libraw phase_one_correct Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-8367
2023-04-228.58.4LibRaw smal_decode_segment desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2015-8366
2023-04-215.55.5LibRaw raw2image_ex desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-1729
2023-02-186.66.4LibRaw libraw_datastream.cpp gets desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-32142
2022-09-024.94.8LibRaw srf File sony.cpp parseSonySRF divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-35535
2022-09-024.94.8LibRaw cr3 File crx.cpp crxFreeSubbandData denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-35534
2022-09-024.94.8LibRaw x3f_utils_patched.cpp simple_decode_row divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-35532
2022-09-024.94.8LibRaw Image File x3f_utils_patched.cpp get_huffman_diff divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-35531
2022-09-025.95.8LibRaw X3F File x3f_utils_patched.cpp new_node desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-35530

43 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 43 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!