Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
References
Configurations
History
28 May 2023, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
27 May 2023, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Mar 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
14 Mar 2023, 18:31
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
28 Feb 2023, 17:22
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CPE | cpe:2.3:a:libraw:libraw:0.20.0:*:*:*:*:*:*:* | |
References | (MISC) https://github.com/LibRaw/LibRaw/issues/400 - Exploit, Issue Tracking | |
References | (MISC) https://www.libraw.org/ - Product | |
References | (MISC) https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d52d470dae65c5a7923ea2a49 - Patch | |
References | (MISC) https://github.com/gtt1995 - Not Applicable | |
CWE | CWE-787 |
17 Feb 2023, 19:07
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-02-17 18:15
Updated : 2024-02-04 23:14
NVD link : CVE-2021-32142
Mitre link : CVE-2021-32142
CVE.ORG link : CVE-2021-32142
JSON object : View
Products Affected
libraw
- libraw
CWE
CWE-787
Out-of-bounds Write