Summary
It was discovered that LibRaw incorrectly handled photo files. If a user or
automated system were tricked into processing a specially crafted photo file, a
remote attacker could cause applications linked against LibRaw to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libraw | 0.15.4-1ubuntu0.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | libraw | 0.17.1-1ubuntu0.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | libraw | 0.18.8-1ubuntu0.2 |
Vulnerabilities 7
-
Unscored —
An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be…
-
Unscored —
An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be …
-
Unscored —
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9…
-
Unscored —
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9…
-
Unscored —
An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to …
-
Unscored —
An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18…
-
Unscored —
An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18…
References
-
report
https://ubuntu.com/security/CVE-2018-5807
-
report
https://ubuntu.com/security/CVE-2018-5810
-
report
https://ubuntu.com/security/CVE-2018-5811
-
report
https://ubuntu.com/security/CVE-2018-5812
-
report
https://ubuntu.com/security/CVE-2018-5813
-
report
https://ubuntu.com/security/CVE-2018-5815
-
report
https://ubuntu.com/security/CVE-2018-5816