CVE-2013-2127

Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
librawlibraw
𝑥
≤ 0.15.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
darktable
bullseye
3.4.1-5
fixed
bookworm
4.2.1-4
fixed
sid
4.8.1-2
fixed
trixie
4.8.1-2
fixed
libraw
bullseye (security)
0.20.2-1+deb11u1
fixed
bullseye
0.20.2-1+deb11u1
fixed
bookworm
0.20.2-2.1
fixed
sid
0.21.3-1
fixed
trixie
0.21.3-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
darktable
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
dne
libkdcraw
raring
Fixed 4:4.10.2-0ubuntu1.1
released
quantal
not-affected
precise
not-affected
lucid
dne
libraw
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/53547
http://www.libraw.org/news/libraw-0-15-1
http://www.openwall.com/lists/oss-security/2013/05/29/7
https://github.com/LibRaw/LibRaw/commit/2f912f5b33582961b1cdbd9fd828589f8b78f21d
http://secunia.com/advisories/53547
http://www.libraw.org/news/libraw-0-15-1
http://www.openwall.com/lists/oss-security/2013/05/29/7
https://github.com/LibRaw/LibRaw/commit/2f912f5b33582961b1cdbd9fd828589f8b78f21d