Vulnerabilities > CVE-2018-5804 - Incorrect Type Conversion or Cast vulnerability in Libraw

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
libraw
CWE-704
nessus

Summary

A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero.

Common Weakness Enumeration (CWE)

Nessus

  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2019-8.NASL
    descriptionThis update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5813: Fixed an error within the
    last seen2020-03-18
    modified2019-01-11
    plugin id121089
    published2019-01-11
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/121089
    titleopenSUSE Security Update : libraw (openSUSE-2019-8)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SU-2019-0005-1.NASL
    descriptionThis update for libraw fixes the following issues : Security issues fixed : The following security vulnerabilities were addressed : CVE-2018-5813: Fixed an error within the
    last seen2020-03-18
    modified2019-01-07
    plugin id120984
    published2019-01-07
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/120984
    titleSUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2019:0005-1)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2018-1619.NASL
    descriptionThis update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5804: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (Dos). (boo#1097975) - CVE-2018-5805: Fixed a boundary error within the quicktake_100_load_raw function that could cause a stack-based buffer overflow and subsequently trigger a crash. (boo#1097973) - CVE-2018-5806: Fixed an error within the leaf_hdr_load_raw function that could trigger a NULL pointer deference, leading to a denial of service (DoS). (boo#1097974) - CVE-2018-5808: Fixed an error within the find_green function that could cause a stack-based buffer overflow and subsequently execute arbitrary code. (boo#1118894) - CVE-2018-5816: Fixed a type confusion error within the identify function that could trigger a division by zero, leading to a denial of service (DoS). (boo#1097975)
    last seen2020-06-05
    modified2018-12-31
    plugin id119949
    published2018-12-31
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/119949
    titleopenSUSE Security Update : libraw (openSUSE-2018-1619)