UBUNTU-CVE-2017-14265

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2017-14265

Downstream

USN-3492-1

Published: 11 Sept 2017, 00:00

Last modified:04 Feb 2026, 02:22

Vulnerability Summary

Overall Risk (default)

high

70/100

CVSS Score

9.8 CRITICAL

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

11 Sept 2017, 00:00

Published

Vulnerability first disclosed

04 Feb 2026, 02:22

Last Modified

Vulnerability information updated

Description

A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.

CVSS Metrics

v3.0•CRITICAL•Score: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•darktable
all | all | all | all | all | all
ubuntu•dcraw
all | all | all | all | all | all
ubuntu•exactimage
all | all | all | all | all | all
ubuntu•kodi
all | all | all | all | all | all
ubuntu•libraw
< 0.15.4-1ubuntu0.1 | < 0.17.1-1ubuntu0.1
ubuntu•rawtherapee
all | all | all | all | all | all
ubuntu•ufraw
all | all