CVE:CVE-2020-15503
CNNVD:CNNVD-202007-138
LibRaw是LibRaw团队的一个用来处理RAW(CRW/CR2、NEF、RAF、DNG和others)格式图片的C++库。
LibRaw 0.20-RC1之前版本中存在输入验证错误漏洞，该漏洞源于程序没有检查缩略图的大小。远程攻击者可通过诱使用户打开特制文件利用该漏洞导致拒绝服务。
solution:Upgrade libraw libraw to a higher version than 0.19.5,0.20:beta1,0.20:beta2,0.20:beta3,and avoid the version (,0.19.5],0.20:beta1,0.20:beta2,0.20:beta3; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0