Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wfke-qkrz-kqeq
Summary
Out-of-bounds Write
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
Aliases
0
alias CVE-2023-1729
Fixed_packages
0
url pkg:apk/alpine/libraw@0.21.1-r2?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=aarch64&distroversion=v3.22&reponame=community
1
url pkg:apk/alpine/libraw@0.21.1-r2?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=armhf&distroversion=v3.22&reponame=community
2
url pkg:apk/alpine/libraw@0.21.1-r2?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=armv7&distroversion=v3.22&reponame=community
3
url pkg:apk/alpine/libraw@0.21.1-r2?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=loongarch64&distroversion=v3.22&reponame=community
4
url pkg:apk/alpine/libraw@0.21.1-r2?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=ppc64le&distroversion=v3.22&reponame=community
5
url pkg:apk/alpine/libraw@0.21.1-r2?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=riscv64&distroversion=v3.22&reponame=community
6
url pkg:apk/alpine/libraw@0.21.1-r2?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=s390x&distroversion=v3.22&reponame=community
7
url pkg:apk/alpine/libraw@0.21.1-r2?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=x86_64&distroversion=v3.22&reponame=community
8
url pkg:apk/alpine/libraw@0.21.1-r2?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/libraw@0.21.1-r2?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libraw@0.21.1-r2%3Farch=x86&distroversion=v3.22&reponame=community
9
url pkg:conan/libraw@0.21.5b
purl pkg:conan/libraw@0.21.5b
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libraw@0.21.5b
10
url pkg:deb/debian/libraw@0.20.2-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/libraw@0.20.2-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tdf-gc7a-tyc9
1
vulnerability VCID-4gs8-jdzj-gbbm
2
vulnerability VCID-66pk-d5y3-dbb5
3
vulnerability VCID-9fa7-ress-u7fx
4
vulnerability VCID-c6cd-m7mz-8kbe
5
vulnerability VCID-dgtv-rfes-8fea
6
vulnerability VCID-fv28-2k28-e3f7
7
vulnerability VCID-r6em-nvvz-bbbp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libraw@0.20.2-1%252Bdeb11u1%3Fdistro=trixie
11
url pkg:deb/debian/libraw@0.20.2-2.1?distro=trixie
purl pkg:deb/debian/libraw@0.20.2-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libraw@0.20.2-2.1%3Fdistro=trixie
12
url pkg:deb/debian/libraw@0.20.2-2.1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/libraw@0.20.2-2.1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tdf-gc7a-tyc9
1
vulnerability VCID-4gs8-jdzj-gbbm
2
vulnerability VCID-66pk-d5y3-dbb5
3
vulnerability VCID-9fa7-ress-u7fx
4
vulnerability VCID-c6cd-m7mz-8kbe
5
vulnerability VCID-dgtv-rfes-8fea
6
vulnerability VCID-fv28-2k28-e3f7
7
vulnerability VCID-r6em-nvvz-bbbp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libraw@0.20.2-2.1%252Bdeb12u1%3Fdistro=trixie
13
url pkg:deb/debian/libraw@0.21.4-2?distro=trixie
purl pkg:deb/debian/libraw@0.21.4-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tdf-gc7a-tyc9
1
vulnerability VCID-4gs8-jdzj-gbbm
2
vulnerability VCID-66pk-d5y3-dbb5
3
vulnerability VCID-9fa7-ress-u7fx
4
vulnerability VCID-c6cd-m7mz-8kbe
5
vulnerability VCID-dgtv-rfes-8fea
6
vulnerability VCID-fv28-2k28-e3f7
7
vulnerability VCID-r6em-nvvz-bbbp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libraw@0.21.4-2%3Fdistro=trixie
14
url pkg:deb/debian/libraw@0.22.1-1?distro=trixie
purl pkg:deb/debian/libraw@0.22.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libraw@0.22.1-1%3Fdistro=trixie
15
url pkg:ebuild/media-libs/libraw@0.21.1-r1
purl pkg:ebuild/media-libs/libraw@0.21.1-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/libraw@0.21.1-r1
Affected_packages
0
url pkg:conan/libraw@0.20.2
purl pkg:conan/libraw@0.20.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-wfke-qkrz-kqeq
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libraw@0.20.2
1
url pkg:conan/libraw@0.21.2
purl pkg:conan/libraw@0.21.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-wfke-qkrz-kqeq
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libraw@0.21.2
2
url pkg:rpm/redhat/LibRaw@0.21.1-1?arch=el9
purl pkg:rpm/redhat/LibRaw@0.21.1-1?arch=el9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-wfke-qkrz-kqeq
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/LibRaw@0.21.1-1%3Farch=el9
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1729.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1729.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1729
reference_id
reference_type
scores
0
value 0.00069
scoring_system epss
scoring_elements 0.21344
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1729
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2188240
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2188240
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/LibRaw/LibRaw/issues/557
reference_id
reference_type
scores
url https://github.com/LibRaw/LibRaw/issues/557
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036281
reference_id 1036281
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036281
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1729
reference_id CVE-2023-1729
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-1729
9
reference_url https://security.gentoo.org/glsa/202312-08
reference_id GLSA-202312-08
reference_type
scores
url https://security.gentoo.org/glsa/202312-08
10
reference_url https://access.redhat.com/errata/RHSA-2024:2137
reference_id RHSA-2024:2137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2137
11
reference_url https://usn.ubuntu.com/6137-1/
reference_id USN-6137-1
reference_type
scores
url https://usn.ubuntu.com/6137-1/
12
reference_url https://usn.ubuntu.com/7266-1/
reference_id USN-7266-1
reference_type
scores
url https://usn.ubuntu.com/7266-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score3.3 - 3.3
Exploitability0.5
Weighted_severity3.0
Risk_score1.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wfke-qkrz-kqeq