Summary
It was discovered that LibRaw incorrectly handled photo files. If a user or
automated system were tricked into processing a specially crafted photo
file, a remote attacker could cause applications linked against LibRaw to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libraw | 0.17.1-1ubuntu0.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | libraw | 0.18.8-1ubuntu0.3 |
Vulnerabilities 7
-
Unscored —
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted in…
-
Unscored —
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
-
Unscored —
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
-
Unscored —
LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
-
Unscored —
A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw…
-
Unscored —
An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be…
-
Unscored —
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can …
References
-
report
https://ubuntu.com/security/CVE-2018-5817
-
report
https://ubuntu.com/security/CVE-2018-5818
-
report
https://ubuntu.com/security/CVE-2018-5819
-
report
https://ubuntu.com/security/CVE-2018-20337
-
report
https://ubuntu.com/security/CVE-2018-20363
-
report
https://ubuntu.com/security/CVE-2018-20364
-
report
https://ubuntu.com/security/CVE-2018-20365