View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-3885 severity low: SUSE including 23 source package names (darktable-2.0.7-1.1, darktable-doc-2.0.7-1.1, …), 99 product×package rows across 45 product lines (SUSE CaaS Platform 4.5, SUSE Enterprise Storage 7, … (45 product lines)): Known Not Affected 75, Fixed 24.
Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.