CVE-2021-32142: Buffer Overflow
Published Feb 17, 2023
·Updated
Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::gets(char, int) in /src/libraw/src/librawdatastream.cpp.
Affected Software
3 affected componentsFixes available
debian/libraw<=0.20.2-1, <=0.20.2-2
0.21.1-10.20.2-2.10.20.2-1+deb11u1
debian/libraw
0.20.2-1+deb11u10.20.2-2.10.21.3-1
Libraw Libraw=0.20.0
Remediation
Event History
Feb 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 21, 2023
Data Sourced
via Red Hat·07:36 AM
DescriptionSeverityAffected Software
Feb 13, 2025
Data Sourced
via Ubuntu·11:57 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·11:57 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-32142.
2
What is the severity rating of CVE-2021-32142?
The severity rating of CVE-2021-32142 is 7.8 (High).
3
What is the description of CVE-2021-32142?
CVE-2021-32142 is a Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 that allows an attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
4
Which software versions are affected by CVE-2021-32142?
The software version affected by CVE-2021-32142 is LibRaw linux/unix v0.20.0.
5
How can I fix CVE-2021-32142?
To fix CVE-2021-32142, update to version 0.20.2-2.1 or later of the LibRaw software.