The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - LibRaw: Memory objects are not intialized properly (CVE-2015-8367)

  - Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other     products, allows context-dependent attackers to cause a denial of service via a crafted photo file that     triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference. (CVE-2013-1438)

  - The faster LJPEG decoder in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent     attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
    (CVE-2013-1439)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 6 : dcraw (Unpatched Vulnerability)

critical Nessus Plugin ID 199405

Version 1.1