CVE-2018-5813

Опубликовано: 07 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 7.1

EPSS Низкий

Описание

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

Ссылки

https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Third Party Advisory
https://github.com/LibRaw/LibRaw/commit/e47384546b43d0fd536e933249047bc397a4d88b
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/83050/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-13/
Third Party Advisory
https://usn.ubuntu.com/3838-1/
Third Party Advisory
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Third Party Advisory
https://github.com/LibRaw/LibRaw/commit/e47384546b43d0fd536e933249047bc397a4d88b
Patch
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/advisories/83050/
Permissions Required
Third Party Advisory
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-13/
Third Party Advisory
https://usn.ubuntu.com/3838-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

Версия до 0.18.11 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 63%

0.00455

Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2018-5813

CVSS3: 6.5

ubuntu

около 7 лет назад

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

CVE-2018-5813

CVSS3: 3.3

redhat

больше 7 лет назад

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

CVE-2018-5813

CVSS3: 6.5

debian

около 7 лет назад

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibR ...

GHSA-gxrc-xc5x-p823

CVSS3: 6.5

github

больше 3 лет назад

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

BDU:2022-05954

CVSS3: 6.5

fstec

больше 7 лет назад

Уязвимость компонента dcraw/dcraw.c библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 63%

0.00455

Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835