p PatchFirst

CVE-2013-1438

CVE-2013-1438

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.

EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • darktable Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.2-2

    Update to 1.2.2-2

  • darktable Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.2-2

    Update to 1.2.2-2

  • darktable Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.2-2

    Update to 1.2.2-2

  • dcraw Debian:12

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • dcraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • dcraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • exactimage Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.9-1

    Update to 0.8.9-1

  • exactimage Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.9-1

    Update to 0.8.9-1

  • exactimage Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.9-1

    Update to 0.8.9-1

  • libkdcraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 24.12.0-1

    Update to 24.12.0-1

  • libkdcraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 24.12.0-1

    Update to 24.12.0-1

  • libraw Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.15.4-1

    Update to 0.15.4-1

  • libraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.15.4-1

    Update to 0.15.4-1

  • libraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.15.4-1

    Update to 0.15.4-1

  • libraw Ubuntu:14.04:LTS

    Affected ranges
    • ECOSYSTEM: < 0.15.3-1ubuntu1

    Update to 0.15.3-1ubuntu1

  • ufraw Ubuntu:14.04:LTS

    Affected ranges
    • ECOSYSTEM: < 0.19.2-2ubuntu1

    Update to 0.19.2-2ubuntu1

  • dcraw Ubuntu:16.04:LTS

    Versions
    • 9.21-0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:16.04:LTS

    Versions
    • 4.2-2build1
    • 4.2-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dcraw Ubuntu:18.04:LTS

    Versions
    • 9.27-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:18.04:LTS

    Versions
    • 5.2-1
    • 5.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:20.04:LTS

    Versions
    • 5.6-1
    • 5.7-1
    • 5.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:22.04:LTS

    Versions
    • 5.8-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:24.04:LTS

    Versions
    • 5.9-1build1
    • 5.9-2
    • 5.10-1
    • 5.10-1build3
    • 5.10-1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →