Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp     (CVE-2018-10529)

  - LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. (CVE-2018-20363)

  - LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. (CVE-2018-20364)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3967-1 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3966-1 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3968-1 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of LibRaw installed on the remote host is prior to 0.19.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2256 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

  - In LibRaw, there is an out-of-bounds write vulnerability within the new_node() function     (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. (CVE-2020-35530)

  - In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function     (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. (CVE-2020-35531)

  - In LibRaw, an out-of-bounds read vulnerability exists within the simple_decode_row() function     (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
    (CVE-2020-35532)

  - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the     LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp. (CVE-2021-32142)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6377-1 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3560 advisory.

  - Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
    (CVE-2020-22628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198997	RHEL 8 : libraw (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
182568	SUSE SLED12 / SLES12 Security Update : libraw (SUSE-SU-2023:3967-1)	Nessus	SuSE Local Security Checks	medium
182566	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:3966-1)	Nessus	SuSE Local Security Checks	medium
182562	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:3968-1)	Nessus	SuSE Local Security Checks	medium
181711	Amazon Linux 2 : LibRaw (ALAS-2023-2256)	Nessus	Amazon Linux Local Security Checks	high
181541	Ubuntu 20.04 LTS : LibRaw vulnerability (USN-6377-1)	Nessus	Ubuntu Local Security Checks	medium
181210	Debian DLA-3560-1 : libraw - LTS security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-22628

medium

Tenable Plugins

high

medium

medium

medium

high

medium

medium