ISOMAN

CVE

CVE-2018-5801

An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://access.redhat.com/errata/RHSA-2018:3065
  2. https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
  3. https://github.com/LibRaw/LibRaw/commit/0df5490b985c419de008d32168650bff17128914
  4. https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
  5. https://secuniaresearch.flexerasoftware.com/advisories/79000/
  6. https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/
  7. https://usn.ubuntu.com/3615-1/
  8. https://access.redhat.com/errata/RHSA-2018:3065
  9. https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
  10. https://github.com/LibRaw/LibRaw/commit/0df5490b985c419de008d32168650bff17128914
  11. https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
  12. https://secuniaresearch.flexerasoftware.com/advisories/79000/
  13. https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/
  14. https://usn.ubuntu.com/3615-1/