openSUSE Security Update : libraw (openSUSE-2018-281)

This update for libraw fixes the following issues : - CVE-2018-5800: Specially crafted RAW files may have caused an application crash via a heap-based buffer overflow boo1084690 - CVE-2018-5801: Specially crafted RAW files may have been used to trigger a NULL pointer de-reference boo1084691 -...

CVE-2018-5802

An error within the "kodakradcloadraw" function internal/dcrawcommon.cpp related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

CVE-2018-5800

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

UBUNTU-CVE-2018-5801

An error within the "LibRaw::unpack" function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

UBUNTU-CVE-2018-5802

An error within the "kodakradcloadraw" function internal/dcrawcommon.cpp related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

UBUNTU-CVE-2018-5800

An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

CVE-2018-5801

An error within the "LibRaw::unpack" function src/librawcxx.cpp in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference...

MGASA-2018-0164 Updated libraw packages bring minor security fixes

Minor security fixes have been made in libraw version 0.18.8 checking limits are not enforced. See references for more details...

Updated libraw packages bring minor security fixes

Minor security fixes have been made in libraw version 0.18.8 checking limits are not enforced. See references for more details...

PT-2018-19264

Name of the Vulnerable Software and Affected Versions libraw versions prior to 0.18.8 Description The issue concerns a problem where checking limits are not enforced. Recommendations For versions prior to 0.18.8, update to version 0.18.8 to resolve the issue...

PT-2018-3824

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description The issue is related to an error within the leaf hdr load raw function in the internal/dcraw common.cpp component of LibRaw, which can be exploited to trigger a NULL pointer dereference. This can all...

PT-2018-3952

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description The issue is related to a boundary error within the quicktake 100 load raw function in the internal/dcraw common.cpp component of the LibRaw library. This error can lead to a stack-based buffer...

PT-2018-3836

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.8 Description A type confusion error within the identify function in LibRaw can be exploited to trigger a division by zero, potentially leading to a denial of service. The issue is related to a lack of division by...

FreeBSD : libraw -- multiple DoS vulnerabilities (6f0b0cbf-1274-11e8-8b5b-4ccc6adda413)

Secunia Research reports : CVE-2018-5800: An off-by-one error within the 'LibRaw::kodakycbcrloadraw' function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the 'LibRaw::unpack' function...

FreeBSD : libraw -- multiple DoS vulnerabilities (c60804f1-126f-11e8-8b5b-4ccc6adda413)

Secunia Research reports : CVE-2017-16909: An error related to the 'LibRaw::panasonicloadraw' function dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image. CVE-2017-16910: An error within the...

Debian: Security Advisory (DLA-1109-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1057-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibRaw 0.18.7 Denial Of Service Vulnerability

Exploit for linux platform in category dos / poc LibRaw 0.18.7 Denial Of Service Vulnerability ====================================================================== 1 Affected Software LibRaw versions prior to 0.18.7. ====================================================================== 2...

PT-2018-3827

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to errors in pointer dereferencing within the LibRaw library for image processing, specifically in the src/libraw cxx.cpp component. This can be exploited by a remote attacker to...

PT-2018-3833

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an error in the kodak radc load raw function, specifically with the buf variable, which can cause an out-of-bounds read memory access, leading to a crash. This can be exploite...