The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-be842ba7fb advisory.

    Backport fix for CVE-2021-32142

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0343 advisory.

  - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the     LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp. (CVE-2021-32142)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0028 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2021-32142:
    Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the     LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0186 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2021-32142:
    Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the     LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0511-1 advisory.

    - CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3433 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3433-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     May 27, 2023                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libraw     Version        : 0.19.2-2+deb10u3     CVE ID         : CVE-2021-32142 CVE-2023-1729     Debian Bug     : 1031790 1036281

    Buffer Overflow vulnerabilities were found in libraw, a raw image     decoder library, which could lead to application crash or privilege     escalation.

    CVE-2021-32142

        A Buffer Overflow vulnerability was found in LibRaw_buffer_datastream::
        gets(char*, int), which could lead to privilege escalation or         application crash.

    CVE-2023-1729

        A heap-buffer-overflow was found in raw2image_ex(int), which may         lead to application crash by maliciously crafted input file.

    For Debian 10 buster, these problems have been fixed in version     0.19.2-2+deb10u3.

    We recommend that you upgrade your libraw packages.

    For the detailed security status of libraw please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libraw

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6137-1 advisory.

    It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked     into processing a specially crafted photo file, a remote attacker could cause applications linked against     LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
172625	Fedora 37 : mingw-LibRaw (2023-be842ba7fb)	Nessus	Fedora Local Security Checks	2023/3/16	2024/11/14	high
189511	CentOS 7 : LibRaw (RHSA-2024:0343)	Nessus	CentOS Local Security Checks	2024/1/25	2024/1/25	high
238678	TencentOS Server 2: LibRaw (TSSA-2024:0028)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239998	TencentOS Server 3: LibRaw (TSSA-2024:0186)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
171914	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libraw (SUSE-SU-2023:0511-1)	Nessus	SuSE Local Security Checks	2023/2/25	2026/6/26	high
176433	Debian dla-3433 : libraw-bin - security update	Nessus	Debian Local Security Checks	2023/5/27	2025/1/22	high
176715	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : LibRaw vulnerabilities (USN-6137-1)	Nessus	Ubuntu Local Security Checks	2023/6/5	2024/8/27	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high