Vulnerabilities > CVE-2018-5813 - Infinite Loop vulnerability in multiple products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
libraw
canonical
CWE-835
nessus
NVD
Published: 2018-12-07
Updated: 2020-11-10

Summary

An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.

Vulnerable Configurations

Part Description Count
Application
Libraw
51
OS
Canonical
3

Common Weakness Enumeration (CWE)

Nessus

  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2019-8.NASL
    descriptionThis update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5813: Fixed an error within the
    last seen2020-03-18
    modified2019-01-11
    plugin id121089
    published2019-01-11
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/121089
    titleopenSUSE Security Update : libraw (openSUSE-2019-8)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2018-849.NASL
    descriptionThis update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5813: Fixed an error within the
    last seen2020-06-05
    modified2018-08-10
    plugin id111630
    published2018-08-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/111630
    titleopenSUSE Security Update : libraw (openSUSE-2018-849)
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3838-1.NASL
    descriptionIt was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-10
    modified2018-12-06
    plugin id119459
    published2018-12-06
    reporterUbuntu Security Notice (C) 2018-2020 Canonical, Inc. / NASL script (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/119459
    titleUbuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libraw vulnerabilities (USN-3838-1)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SU-2019-0005-1.NASL
    descriptionThis update for libraw fixes the following issues : Security issues fixed : The following security vulnerabilities were addressed : CVE-2018-5813: Fixed an error within the
    last seen2020-03-18
    modified2019-01-07
    plugin id120984
    published2019-01-07
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/120984
    titleSUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2019:0005-1)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SU-2018-3343-1.NASL
    descriptionThis update for libraw fixes the following issues : Security issues fixed : CVE-2018-5800: Fixed heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function (bsc#1084691). CVE-2018-5801: Fixed NULL pointer dereference in LibRaw::unpack function (bsc#1084690). CVE-2018-5802: Fixed out-of-bounds read in kodak_radc_load_raw function (bsc#1084688). CVE-2018-5813: Fixed infinite loop in the parse_minolta function (bsc#1103200) CVE-2018-5810: Fixed a heap-based buffer overflow in rollei_load_raw (bsc#1103353) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id118353
    published2018-10-24
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/118353
    titleSUSE SLED12 Security Update : libraw (SUSE-SU-2018:3343-1)

References