CVE-2017-6887 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-6887 Interim 1 39 2025-11-05T04:04:25Z current 2021-05-30T13:53:53Z 2025-11-05T04:04:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-6887 A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html E-Mail link for SUSE-SU-2017:2300-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed libraw libraw-devel libraw-devel-0.15.4-21.1 libraw-devel-0.15.4-9.2 libraw-devel-0.18.9-1.9 libraw-devel-0.18.9-3.11.1 libraw-devel-0.18.9-3.8.1 libraw-devel-0.20.2-150400.1.36 libraw-devel-0.20.2-4.1 libraw-devel-static-0.15.4-21.1 libraw-devel-static-0.15.4-9.2 libraw-devel-static-0.20.2-4.1 libraw-tools-0.20.2-4.1 libraw-tools-0.21.4-160000.2.2 libraw16 libraw16-0.18.9-1.9 libraw16-0.18.9-3.11.1 libraw16-0.18.9-3.14.1 libraw16-0.18.9-3.8.1 libraw16-0.18.9-bp153.2.25 libraw16-0.18.9-lp150.1.1 libraw16-0.18.9-lp152.4.8 libraw20-0.20.2-150400.1.36 libraw20-0.20.2-150400.3.6.1 libraw20-0.20.2-4.1 libraw20-32bit-0.20.2-4.1 libraw23-0.21.1-150600.1.20 libraw23-0.21.4-160000.2.2 libraw9-0.15.4-21.1 libraw9-0.15.4-9.2 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libraw9-0.15.4-21.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libraw20-0.20.2-150400.1.36 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libraw20-0.20.2-150400.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libraw23-0.21.1-150600.1.20 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libraw23-0.21.1-150600.1.20 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libraw-tools-0.21.4-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libraw23-0.21.4-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libraw-devel-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libraw-devel-static-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libraw-devel-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libraw-devel-static-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libraw-devel-0.15.4-21.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libraw-devel-static-0.15.4-21.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libraw9-0.15.4-21.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libraw-devel-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libraw-devel-static-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libraw9-0.15.4-21.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libraw9-0.15.4-9.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libraw-devel-0.18.9-1.9 as a component of SUSE Linux Enterprise Workstation Extension 15 libraw16-0.18.9-1.9 as a component of SUSE Linux Enterprise Workstation Extension 15 libraw-devel-0.18.9-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libraw16-0.18.9-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libraw-devel-0.18.9-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libraw16-0.18.9-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libraw-devel-0.18.9-3.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libraw16-0.18.9-3.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libraw-devel-0.20.2-150400.1.36 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libraw16-0.18.9-3.14.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libraw16-0.18.9-lp150.1.1 as a component of openSUSE Leap 15.0 libraw16-0.18.9-lp152.4.8 as a component of openSUSE Leap 15.2 libraw16-0.18.9-bp153.2.25 as a component of openSUSE Leap 15.3 libraw20-0.20.2-150400.1.36 as a component of openSUSE Leap 15.4 libraw-devel-0.20.2-4.1 as a component of openSUSE Tumbleweed libraw-devel-static-0.20.2-4.1 as a component of openSUSE Tumbleweed libraw-tools-0.20.2-4.1 as a component of openSUSE Tumbleweed libraw20-0.20.2-4.1 as a component of openSUSE Tumbleweed libraw20-32bit-0.20.2-4.1 as a component of openSUSE Tumbleweed libraw-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libraw16 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libraw as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs. CVE-2017-6887 SUSE Linux Enterprise Desktop 12 SP2:libraw9-0.15.4-9.2 SUSE Linux Enterprise Desktop 12 SP3:libraw9-0.15.4-9.2 SUSE Linux Enterprise Desktop 12 SP4:libraw9-0.15.4-21.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libraw20-0.20.2-150400.1.36 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libraw20-0.20.2-150400.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libraw23-0.21.1-150600.1.20 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libraw23-0.21.1-150600.1.20 SUSE Linux Enterprise Server 16.0:libraw-tools-0.21.4-160000.2.2 SUSE Linux Enterprise Server 16.0:libraw23-0.21.4-160000.2.2 SUSE Linux Enterprise Software Development Kit 12 SP2:libraw-devel-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP2:libraw-devel-static-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP2:libraw9-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libraw-devel-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libraw-devel-static-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libraw9-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libraw-devel-0.15.4-21.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libraw-devel-static-0.15.4-21.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libraw9-0.15.4-21.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP5:libraw-devel-static-0.15.4-9.2 SUSE Linux Enterprise Software Development Kit 12 SP5:libraw9-0.15.4-9.2 SUSE Linux Enterprise Workstation Extension 12 SP2:libraw9-0.15.4-9.2 SUSE Linux Enterprise Workstation Extension 12 SP3:libraw9-0.15.4-9.2 SUSE Linux Enterprise Workstation Extension 12 SP4:libraw9-0.15.4-21.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libraw9-0.15.4-9.2 SUSE Linux Enterprise Workstation Extension 15:libraw-devel-0.18.9-1.9 SUSE Linux Enterprise Workstation Extension 15:libraw16-0.18.9-1.9 SUSE Linux Enterprise Workstation Extension 15 SP1:libraw-devel-0.18.9-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP1:libraw16-0.18.9-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libraw-devel-0.18.9-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libraw16-0.18.9-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libraw-devel-0.18.9-3.11.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libraw16-0.18.9-3.11.1 SUSE Linux Enterprise Workstation Extension 15 SP4:libraw-devel-0.20.2-150400.1.36 SUSE Linux Enterprise Workstation Extension 15 SP4:libraw16-0.18.9-3.14.1 openSUSE Leap 15.0:libraw16-0.18.9-lp150.1.1 openSUSE Leap 15.2:libraw16-0.18.9-lp152.4.8 openSUSE Leap 15.3:libraw16-0.18.9-bp153.2.25 openSUSE Leap 15.4:libraw20-0.20.2-150400.1.36 openSUSE Tumbleweed:libraw-devel-0.20.2-4.1 openSUSE Tumbleweed:libraw-devel-static-0.20.2-4.1 openSUSE Tumbleweed:libraw-tools-0.20.2-4.1 openSUSE Tumbleweed:libraw20-0.20.2-4.1 openSUSE Tumbleweed:libraw20-32bit-0.20.2-4.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libraw SUSE Linux Enterprise Workstation Extension 15 SP2:libraw-devel SUSE Linux Enterprise Workstation Extension 15 SP2:libraw16 moderate 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L