Oracle Linux: CVE-2021-32142: ELSA-2024-0343: LibRaw security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2021-32142: ELSA-2024-0343:LibRaw security update (MODERATE) (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

02/17/2023

Created

01/26/2024

Added

01/24/2024

Modified

01/07/2025

Description

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp. A flaw was found in the LibRaw package. A stack buffer overflow in the LibRaw_buffer_datastream::gets() function in src/libraw_datastream.cpp caused by a maliciously crafted file may result in compromised confidentiality and integrity and an application crash.

Solution(s)

• oracle-linux-upgrade-libraw
• oracle-linux-upgrade-libraw-devel
• oracle-linux-upgrade-libraw-static

References

• https://attackerkb.com/topics/cve-2021-32142
• CVE - 2021-32142
• ELSA-2024-0343
• ELSA-2023-6343
• ELSA-2024-2994