CVE-2020-15365
CVE-2020-15365
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds.
CVSS 6.5 · Medium · EPSS 1.3%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
darktable Ubuntu:16.04:LTS
- Versions
- 1.6.8-1
- 1.6.9-1
- 2.0.0-1
- 2.0.1-1
- 2.0.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dcraw Ubuntu:16.04:LTS
- Versions
- 9.21-0.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:16.04:LTS
- Versions
- 0.9.1-6build1
- 0.9.1-6ubuntu1
- 0.9.1-8ubuntu1
- 0.9.1-9
- 0.9.1-9build1
- 0.9.1-10
- 0.9.1-11
- 0.9.1-12
- 0.9.1-12ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:16.04:LTS
- Versions
- 15.1+dfsg1-3
- 15.2+dfsg1-1build1
- 15.2+dfsg1-3
- 15.2+dfsg1-3ubuntu1
- 15.2+dfsg1-3ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:16.04:LTS
- Versions
- 4.2-2build1
- 4.2-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ufraw Ubuntu:16.04:LTS
- Versions
- 0.20-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:18.04:LTS
- Versions
- 2.2.5-2
- 2.4.0-1
- 2.4.1-1
- 2.4.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dcraw Ubuntu:18.04:LTS
- Versions
- 9.27-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:18.04:LTS
- Versions
- 0.9.2-1build1
- 1.0.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:18.04:LTS
- Versions
- 2:17.3+dfsg1-3
- 2:17.3+dfsg1-3build1
- 2:17.3+dfsg1-5
- 2:17.3+dfsg1-5build1
- 2:17.3+dfsg1-5build2
- 2:17.6+dfsg1-1
- 2:17.6+dfsg1-1build1
- 2:17.6+dfsg1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:18.04:LTS
- Versions
- 5.2-1
- 5.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ufraw Ubuntu:18.04:LTS
- Versions
- 0.22-1.1
- 0.22-2
- 0.22-3
- 0.22-3.1~build0.18.04.1
- 0.22-3.1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:20.04:LTS
- Versions
- 2.6.0-1
- 2.6.2-3
- 2.6.3-1
- 2.6.3-1build1
- 2.6.3-1build2
- 3.0.1-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dcraw Ubuntu:20.04:LTS
- Versions
- 9.28-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:20.04:LTS
- Versions
- 1.0.2-3
- 1.0.2-5ubuntu1
- 1.0.2-5ubuntu2
- 1.0.2-7ubuntu1
- 1.0.2-7ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:20.04:LTS
- Versions
- 2:17.6+dfsg1-4ubuntu4
- 2:17.6+dfsg1-4ubuntu9
- 2:17.6+dfsg1-4ubuntu10
- 2:18.5+dfsg1-0ubuntu3
- 2:18.6+dfsg1-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:20.04:LTS
- Versions
- 5.6-1
- 5.7-1
- 5.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:22.04:LTS
- Versions
- 3.6.0-0ubuntu1
- 3.8.0-2
- 3.8.0-3
- 3.8.0-3build1
- 3.8.0-3build2
- 3.8.1-1
- 3.8.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dcraw Ubuntu:22.04:LTS
- Versions
- 9.28-2
- 9.28-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
exactimage Ubuntu:22.04:LTS
- Versions
- 1.0.2-8
- 1.0.2-8build1
- 1.0.2-8build2
- 1.0.2-8build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kodi Ubuntu:22.04:LTS
- Versions
- 2:19.1+dfsg2-2
- 2:19.3+dfsg1-1
- 2:19.3+dfsg1-1build2
- 2:19.3+dfsg1-1build3
- 2:19.3+dfsg1-1build4
- 2:19.3+dfsg1-1build5
- 2:19.4+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rawtherapee Ubuntu:22.04:LTS
- Versions
- 5.8-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
darktable Ubuntu:24.04:LTS
- Versions
- 4.4.2-1ubuntu1
- 4.4.2-1ubuntu2
- 4.4.2-1.1
- 4.4.2-1.1build1
- 4.6.1-2
- 4.6.1-2build3
- 4.6.1-2build4
- 4.6.1-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published