CVE-2018-5806

Опубликовано: 07 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

Ссылки

https://access.redhat.com/errata/RHSA-2018:3065
Third Party Advisory
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Release Notes
https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff
Patch
https://secuniaresearch.flexerasoftware.com/advisories/81000/
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3065
Third Party Advisory
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Release Notes
https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff
Patch
https://secuniaresearch.flexerasoftware.com/advisories/81000/
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

Версия до 0.18.8 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00511

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-5806

CVSS3: 6.5

ubuntu

почти 7 лет назад

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

CVE-2018-5806

CVSS3: 3.3

redhat

больше 7 лет назад

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

CVE-2018-5806

CVSS3: 6.5

debian

почти 7 лет назад

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_com ...

GHSA-hcxg-6ffh-5mqj

CVSS3: 6.5

github

больше 3 лет назад

An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.

BDU:2022-05865

CVSS3: 6.5

fstec

больше 7 лет назад

Уязвимость функции leaf_hdr_load_raw() компонента internal/dcraw_common.cpp библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 66%

0.00511

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476