CVE-2020-22628: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspectratio.cpp.
Affected Software
3 affected componentsFixes available
debian/libraw
0.20.2-1+deb11u10.20.2-2.10.21.3-1
Libraw Libraw<2019-11-20
Libraw Libraw<=0.19.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u1Fixed in 0.20.2-2.1Fixed in 0.21.3-1
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-22628?
CVE-2020-22628 is a buffer overflow vulnerability in the LibRaw::stretch() function.
2
How does CVE-2020-22628 affect LibRaw?
CVE-2020-22628 affects the LibRaw library through its stretch() function in the aspect_ratio.cpp file.
3
What is the severity of CVE-2020-22628?
The severity of CVE-2020-22628 is rated as medium with a severity value of 6.5.
4
Which software versions are affected by CVE-2020-22628?
Versions of LibRaw up to and exclusive of 2019-11-20 are affected. Ubuntu versions 0.19.5-1ubuntu1.3 and 0.20.0-4 are affected as well.
5
How can I fix CVE-2020-22628?
Apply the remedy versions: 0.19.5-1ubuntu1.3 for Ubuntu, and the latest versions for Debian.