Heap-based buffer overflow in LibRaw - CVE-2023-1729

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU76158

Heap-based buffer overflow in LibRaw - CVE-2023-1729

Published: May 15, 2023


Vulnerability identifier: #VU76158
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-1729
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the raw2image_start() function in preprocessing/raw2image.cpp. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

LibRaw
Gentoo Linux
Debian Linux
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
Desktop Applications Module
openSUSE Leap
openEuler
Ubuntu
Fedora
libraw-devel
libraw-devel-static
libraw9
libraw-debugsource
libraw9-debuginfo
libraw16-debuginfo
libraw-debuginfo
libraw16
libraw19 (Ubuntu package)
LibRaw
libraw (Debian package)
libraw20 (Ubuntu package)
LibRaw-devel
LibRaw-debuginfo
LibRaw-debugsource
mingw-LibRaw
libraw20-32bit-debuginfo
libraw20-debuginfo
libraw-tools
libraw-tools-debuginfo
libraw20
libraw20-32bit
media-libs/libraw
LibRaw (Red Hat package)
digikam

How to mitigate CVE-2023-1729

Install updates from vendor's website.

libraw-devel - addressed in versions 0.15.4-39.1, 0.20.2-150400.3.6.1
libraw-devel-static - addressed in versions 0.15.4-39.1, 0.20.2-150400.3.6.1
libraw9 - update to 0.15.4-39.1
libraw-debugsource - addressed in versions 0.15.4-39.1, 0.18.9-150000.3.20.1, 0.20.2-150400.3.6.1
libraw9-debuginfo - update to 0.15.4-39.1
libraw16-debuginfo - update to 0.18.9-150000.3.20.1
libraw-debuginfo - update to 0.18.9-150000.3.20.1
libraw16 - update to 0.18.9-150000.3.20.1
libraw19 (Ubuntu package) - update to 0.19.5-1ubuntu1.2
LibRaw - update to 0.20.2
libraw (Debian package) - update to 0.20.2-1+deb11u1
libraw20 (Ubuntu package) - addressed in versions 0.20.2-2ubuntu2.22.04.1, 0.20.2-2ubuntu2.22.10.1, 0.20.2-2ubuntu2.23.04.1
LibRaw-devel - update to 0.20.2-5
LibRaw-debuginfo - update to 0.20.2-5
LibRaw-debugsource - update to 0.20.2-5
LibRaw - update to 0.20.2-5
LibRaw - addressed in versions 0.20.2-8.fc36, 0.20.2-8.fc37, 0.21.1-4.fc38
mingw-LibRaw - addressed in versions 0.20.2-9.fc37, 0.21.1-3.fc38
libraw20-32bit-debuginfo - update to 0.20.2-150400.3.6.1
libraw20-debuginfo - update to 0.20.2-150400.3.6.1
libraw-tools - update to 0.20.2-150400.3.6.1
libraw-tools-debuginfo - update to 0.20.2-150400.3.6.1
libraw20 - update to 0.20.2-150400.3.6.1
libraw20-32bit - update to 0.20.2-150400.3.6.1
media-libs/libraw - update to 0.21.1-r1
LibRaw - update to 0.21.1-1
LibRaw-devel - update to 0.21.1-1
LibRaw (Red Hat package) - update to 0.21.1-1.el9
digikam - addressed in versions 8.0.0-2.fc36, 8.0.0-2.fc37

External References

Related Security Bulletins