REDHAT-BUG-2172004: Buffer Overflow

Published Feb 21, 2023

Updated

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::gets(char, int) in /src/libraw/src/librawdatastream.cpp.

https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d52d470dae65c5a7923ea2a49 https://github.com/LibRaw/LibRaw/issues/400

Affected Software

1 affected component

Libraw Libraw

Event History

Feb 21, 2023

Data Sourced

via Red Hat·07:36 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2172004?

The severity of REDHAT-BUG-2172004 is high due to the potential for privilege escalation via a buffer overflow.

How do I fix REDHAT-BUG-2172004?

To fix REDHAT-BUG-2172004, update to the latest version of LibRaw that addresses this buffer overflow vulnerability.

What versions of LibRaw are affected by REDHAT-BUG-2172004?

LibRaw linux/unix version 0.20.0 is affected by REDHAT-BUG-2172004.

What are the potential impacts of REDHAT-BUG-2172004?

The potential impacts of REDHAT-BUG-2172004 include unauthorized access and control over the system due to privilege escalation.

Who discovered REDHAT-BUG-2172004?

REDHAT-BUG-2172004 was reported through a Red Hat bug tracking system.