PT-2018-3824 · Libraw+4 · Libraw+4
Laurent Delosieres
·
Publicado
2018-02-24
·
Atualizado
2024-06-15
·
CVE-2018-5806
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LibRaw versions prior to 0.18.8
Description
The issue is related to an error within the
leaf hdr load raw() function in the internal/dcraw common.cpp component of LibRaw, which can be exploited to trigger a NULL pointer dereference. This can allow a remote attacker to cause a denial of service.Recommendations
For versions prior to 0.18.8, update to version 0.18.8 or later to resolve the issue. As a temporary workaround, consider disabling the
leaf hdr load raw() function until a patch is available.Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Libraw
Red Hat
Suse