A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.

Affected: openEuler:22.03-LTS-SP3: dcraw

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras. Security Fix(es): (CVE-2017-13735) (CVE-2017-14608) A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.(CVE-2018-19655)

dcraw-9.28.0-1.6 on GA media

Security update for dcraw

Affected: Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: ufraw, Ubuntu:18.04:LTS: dcraw, Ubuntu:20.04:LTS: dcraw, Ubuntu:22.04:LTS: dcraw

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.