Bug 628568 (CVE-2017-6886, CVE-2017-6887) – <media-libs/libraw-0.18.2: multiple memory corruption vulnerabilities (CVE-2017-{6886,6887})

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Aleksandr Wagner (Kivak) 2017-08-22 06:21:04 UTC]

CVE-2017-6886 (https://nvd.nist.gov/vuln/detail/CVE-2017-6886):

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

References:

http://www.securityfocus.com/bid/98605
https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
https://secuniaresearch.flexerasoftware.com/advisories/75737/
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/


CVE-2017-6887 (https://nvd.nist.gov/vuln/detail/CVE-2017-6887):

A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.

References:

http://www.securityfocus.com/bid/98592
https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
https://secuniaresearch.flexerasoftware.com/advisories/75737/
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/

@ Maintainer(s): Please state if the package is ready for stabilization for =media-libs/libraw-0.18.2.

[Comment 1 Sergei Trofimovich (RETIRED) 2017-08-28 08:24:23 UTC]

ia64 stable

[Comment 2 Matt Turner 2017-08-31 15:22:23 UTC]

alpha stable

[Comment 3 Aaron Bauman (RETIRED) 2017-09-04 14:12:55 UTC]

amd64/x86 stable

[Comment 4 Markus Meier 2017-09-07 19:40:12 UTC]

arm stable

[Comment 5 Aaron Bauman (RETIRED) 2017-09-10 22:22:12 UTC]

sparc was dropped to exp.

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b5901d8f716555a1479f12313a2925fcadd177a9

[Comment 6 Sergei Trofimovich (RETIRED) 2017-09-24 17:18:00 UTC]

ppc64 stable

[Comment 7 Sergei Trofimovich (RETIRED) 2017-09-24 18:52:07 UTC]

ppc stable

[Comment 8 Sergei Trofimovich (RETIRED) 2017-09-24 20:20:40 UTC]

hppa stable

[Comment 9 Aaron Bauman (RETIRED) 2017-09-24 21:12:47 UTC]

GLSA Vote: No