p PatchFirst

CVE-2015-8366

CVE-2015-8366

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVSS 9.8 · Critical · EPSS 5.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • darktable Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • darktable Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • darktable Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.0-1

    Update to 2.0.0-1

  • dcraw Debian:12

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • dcraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • dcraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.28-1

    Update to 9.28-1

  • exactimage Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.1-13

    Update to 0.9.1-13

  • exactimage Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.1-13

    Update to 0.9.1-13

  • exactimage Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.1-13

    Update to 0.9.1-13

  • libraw Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.17.1-1

    Update to 0.17.1-1

  • libraw Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.17.1-1

    Update to 0.17.1-1

  • libraw Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.17.1-1

    Update to 0.17.1-1

  • rawtherapee Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.2.1241-2

    Update to 4.2.1241-2

  • rawtherapee Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.2.1241-2

    Update to 4.2.1241-2

  • rawtherapee Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.2.1241-2

    Update to 4.2.1241-2

  • libraw Ubuntu:14.04:LTS

    Versions
    • 0.15.3-1ubuntu1
    • 0.15.4-1
    Affected ranges
    • ECOSYSTEM: < 0.15.4-1ubuntu0.1

    Update to 0.15.4-1ubuntu0.1

  • darktable Ubuntu:16.04:LTS

    Versions
    • 1.6.8-1
    • 1.6.9-1
    • 2.0.0-1
    • 2.0.1-1
    • 2.0.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dcraw Ubuntu:16.04:LTS

    Versions
    • 9.21-0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • exactimage Ubuntu:16.04:LTS

    Versions
    • 0.9.1-6build1
    • 0.9.1-6ubuntu1
    • 0.9.1-8ubuntu1
    • 0.9.1-9
    • 0.9.1-9build1
    • 0.9.1-10
    • 0.9.1-11
    • 0.9.1-12
    • 0.9.1-12ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • kodi Ubuntu:16.04:LTS

    Versions
    • 15.1+dfsg1-3
    • 15.2+dfsg1-1build1
    • 15.2+dfsg1-3
    • 15.2+dfsg1-3ubuntu1
    • 15.2+dfsg1-3ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rawtherapee Ubuntu:16.04:LTS

    Versions
    • 4.2-2build1
    • 4.2-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ufraw Ubuntu:16.04:LTS

    Versions
    • 0.20-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • darktable Ubuntu:18.04:LTS

    Versions
    • 2.2.5-2
    • 2.4.0-1
    • 2.4.1-1
    • 2.4.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →