CVE-2018-5812

Опубликовано: 07 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.

Ссылки

https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Third Party Advisory
https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/81800/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
Third Party Advisory
https://usn.ubuntu.com/3838-1/
Third Party Advisory
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Third Party Advisory
https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/81800/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/
Third Party Advisory
https://usn.ubuntu.com/3838-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

Версия до 0.18.9 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 66%

0.00508

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-5812

CVSS3: 6.5

ubuntu

около 7 лет назад

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.

CVE-2018-5812

CVSS3: 3.3

redhat

больше 7 лет назад

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.

CVE-2018-5812

CVSS3: 6.5

debian

около 7 лет назад

An error within the "nikon_coolscan_load_raw()" function (internal/dcr ...

GHSA-4848-xc24-jj88

CVSS3: 6.5

github

больше 3 лет назад

An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.

BDU:2022-05866

CVSS3: 6.5

fstec

почти 8 лет назад

Уязвимость функции nikon_coolscan_load_raw() компонента internal/dcraw_common.cpp библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 66%

0.00508

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476