CVE-2015-3885 PUBLISHED

Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.

EPSS 3.56% · 87.6th percentile

Risk Scores

EPSS Score
3.56%
87.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSfreeimage3.15.4-3ubuntu0.1+esm1, 0, 3.15.1-2build1
Ubuntu:24.04:LTSkodi2:20.2+dfsg-4ubuntu1, 2:20.2+dfsg-4build1, 2:20.2+dfsg-4build2
Ubuntu:14.04:LTSlibraw0, 0.15.3-1ubuntu1, 0.15.4-1
Ubuntu:16.04:LTSkodi15.2+dfsg1-3ubuntu1.1, 15.2+dfsg1-3ubuntu1, 15.2+dfsg1-3
Ubuntu:16.04:LTSdcraw9.21-0.2, 0

Timeline

References

Open in Interactive Console →