CVE-2018-5802

2018-12-0722:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.008 Low

EPSS

Percentile

81.6%

JSON

An error within the “kodak_radc_load_raw()” function (internal/dcraw_common.cpp) related to the “buf” variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.

OSVersionArchitecturePackageVersionFilename
Debian12alllibraw< 0.18.7-1libraw_0.18.7-1_all.deb
Debian11alllibraw< 0.18.7-1libraw_0.18.7-1_all.deb
Debian10alllibraw< 0.18.7-1libraw_0.18.7-1_all.deb
Debian999alllibraw< 0.18.7-1libraw_0.18.7-1_all.deb
Debian13alllibraw< 0.18.7-1libraw_0.18.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libraw	< 0.18.7-1	libraw_0.18.7-1_all.deb
Debian	11	all	libraw	< 0.18.7-1	libraw_0.18.7-1_all.deb
Debian	10	all	libraw	< 0.18.7-1	libraw_0.18.7-1_all.deb
Debian	999	all	libraw	< 0.18.7-1	libraw_0.18.7-1_all.deb
Debian	13	all	libraw	< 0.18.7-1	libraw_0.18.7-1_all.deb