CVE-2015-8367
CVE-2015-8367
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.
CVSS 9.8 · Critical · EPSS 5.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
darktable Debian:12
- Affected ranges
- ECOSYSTEM: < 2.0.0-1
Update to 2.0.0-1
darktable Debian:13
- Affected ranges
- ECOSYSTEM: < 2.0.0-1
Update to 2.0.0-1
darktable Debian:14
- Affected ranges
- ECOSYSTEM: < 2.0.0-1
Update to 2.0.0-1
libraw Debian:12
- Affected ranges
- ECOSYSTEM: < 0.17.1-1
Update to 0.17.1-1
libraw Debian:13
- Affected ranges
- ECOSYSTEM: < 0.17.1-1
Update to 0.17.1-1
libraw Debian:14
- Affected ranges
- ECOSYSTEM: < 0.17.1-1
Update to 0.17.1-1
libraw Ubuntu:14.04:LTS
- Versions
- 0.15.3-1ubuntu1
- 0.15.4-1
- Affected ranges
- ECOSYSTEM: < 0.15.4-1ubuntu0.1
Update to 0.15.4-1ubuntu0.1
exactimage Ubuntu:16.04:LTS
- Versions
- 0.9.1-6build1
- 0.9.1-6ubuntu1
- 0.9.1-8ubuntu1
- 0.9.1-9
- 0.9.1-9build1
- 0.9.1-10
- 0.9.1-11
- 0.9.1-12
- 0.9.1-12ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:16.04:LTS
- Versions
- 15.1+dfsg1-3
- 15.2+dfsg1-1build1
- 15.2+dfsg1-3
- 15.2+dfsg1-3ubuntu1
- 15.2+dfsg1-3ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:16.04:LTS
- Versions
- 4.2-2build1
- 4.2-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:18.04:LTS
- Versions
- 0.9.2-1build1
- 1.0.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:18.04:LTS
- Versions
- 2:17.3+dfsg1-3
- 2:17.3+dfsg1-3build1
- 2:17.3+dfsg1-5
- 2:17.3+dfsg1-5build1
- 2:17.3+dfsg1-5build2
- 2:17.6+dfsg1-1
- 2:17.6+dfsg1-1build1
- 2:17.6+dfsg1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:18.04:LTS
- Versions
- 5.2-1
- 5.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:20.04:LTS
- Versions
- 1.0.2-3
- 1.0.2-5ubuntu1
- 1.0.2-5ubuntu2
- 1.0.2-7ubuntu1
- 1.0.2-7ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:20.04:LTS
- Versions
- 2:17.6+dfsg1-4ubuntu4
- 2:17.6+dfsg1-4ubuntu9
- 2:17.6+dfsg1-4ubuntu10
- 2:18.5+dfsg1-0ubuntu3
- 2:18.6+dfsg1-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:20.04:LTS
- Versions
- 5.6-1
- 5.7-1
- 5.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:22.04:LTS
- Versions
- 1.0.2-8
- 1.0.2-8build1
- 1.0.2-8build2
- 1.0.2-8build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:22.04:LTS
- Versions
- 2:19.1+dfsg2-2
- 2:19.3+dfsg1-1
- 2:19.3+dfsg1-1build2
- 2:19.3+dfsg1-1build3
- 2:19.3+dfsg1-1build4
- 2:19.3+dfsg1-1build5
- 2:19.4+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:22.04:LTS
- Versions
- 5.8-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:24.04:LTS
- Versions
- 1.0.2-11build2
- 1.0.2-11build3
- 1.0.2-11build4
- 1.0.2-11build7
- 1.0.2-11build8
- 1.0.2-11build9
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:24.04:LTS
- Versions
- 2:20.2+dfsg-4
- 2:20.2+dfsg-4build1
- 2:20.2+dfsg-4build2
- 2:20.2+dfsg-4ubuntu1
- 2:20.3+dfsg-1
- 2:20.4+dfsg-1
- 2:20.5+dfsg-1build2
- 2:20.5+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:24.04:LTS
- Versions
- 5.9-1build1
- 5.9-2
- 5.10-1
- 5.10-1build3
- 5.10-1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:25.10
- Versions
- 1.2.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published