CVE-2021-32142: Buffer Overflow
Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::gets(char, int) in /src/libraw/src/librawdatastream.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.21.1-1Fixed in 0.20.2-2.1Fixed in 0.20.2-1+deb11u1 - Upgrade
Upgrade
debian/librawto a version that resolves this vulnerability.Fixed in 0.20.2-1+deb11u1Fixed in 0.20.2-2.1Fixed in 0.21.3-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-32142.
What is the severity rating of CVE-2021-32142?
The severity rating of CVE-2021-32142 is 7.8 (High).
What is the description of CVE-2021-32142?
CVE-2021-32142 is a Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 that allows an attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
Which software versions are affected by CVE-2021-32142?
The software version affected by CVE-2021-32142 is LibRaw linux/unix v0.20.0.
How can I fix CVE-2021-32142?
To fix CVE-2021-32142, update to version 0.20.2-2.1 or later of the LibRaw software.