There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.

Affected: openEuler:22.03-LTS-SP3: dcraw

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras. Security Fix(es): (CVE-2017-13735) (CVE-2017-14608) A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

dcraw-9.28.0-1.6 on GA media

Security update for libraw

Affected: Ubuntu:14.04:LTS: libraw, Ubuntu:16.04:LTS: libraw, Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: dcraw, Ubuntu:18.04:LTS: exactimage, Ubuntu:18.04:LTS: rawtherapee and 19 more

There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.