Arch Linux Security Advisory ASA-201709-18
=========================================
Severity: High
Date    : 2017-09-22
CVE-ID  : CVE-2017-13735 CVE-2017-14265
Package : libraw
Type    : multiple issues
Remote  : No
Link    : https://security.archlinux.org/AVG-410

Summary
======
The package libraw before version 0.18.5-1 is vulnerable to multiple
issues including arbitrary code execution and denial of service.

Resolution
=========
Upgrade to 0.18.5-1.

# pacman -Syu "libraw>=0.18.5-1"

The problems have been fixed upstream in version 0.18.5.

Workaround
=========
None.

Description
==========
- CVE-2017-13735 (denial of service)

There is a floating point exception in the kodak_radc_load_raw function
in dcraw_common.cpp in LibRaw 0.18.2 leading to denial of service.

- CVE-2017-14265 (arbitrary code execution)

A stack-based buffer overflow was discovered in xtrans_interpolate in
internal/dcraw_common.cpp in LibRaw before 0.18.3 leading to denial of
service or arbitrary code execution.

Impact
=====
An attacker is able to crash the application or execute arbitrary code
by tricking the user into opening or processing a specially crafted
image file.

References
=========
https://github.com/LibRaw/LibRaw/issues/96
https://bugzilla.redhat.com/show_bug.cgi?id=1483988
https://github.com/LibRaw/LibRaw/issues/99
https://security.archlinux.org/CVE-2017-13735
https://security.archlinux.org/CVE-2017-14265