CVE-2017-16909: Buffer Overflow
Published Dec 7, 2018
·Updated
An error related to the "LibRaw::panasonicloadraw()" function (dcrawcommon.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image.
Affected Software
5 affected componentsFixes available
Libraw Libraw<0.18.6
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
debian/libraw
0.20.2-1+deb11u10.20.2-1+deb11u20.20.2-2.1+deb12u10.21.4-20.21.5b-1
Remediation
Event History
Dec 7, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:32 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·09:51 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·09:52 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-16909.
2
What is the severity of CVE-2017-16909?
CVE-2017-16909 has a severity rating of 8.8 (high).
3
Which versions of LibRaw are affected by CVE-2017-16909?
LibRaw versions prior to 0.18.6 are affected by CVE-2017-16909.
4
How can CVE-2017-16909 be exploited?
CVE-2017-16909 can be exploited by using a specially crafted TIFF image to cause a heap-based buffer overflow and subsequently crash the application.
5
Are there any remediation steps available for CVE-2017-16909?
Yes, updating to LibRaw version 0.18.6 or later can remediate the vulnerability.