PT-2018-3968

CVE-2018-5808

·

تاريخ النشر

2018-04-24

·

تاريخ التحديث

2022-01-29

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.9
Description The issue is related to a stack-based buffer overflow error within the find green() function in the internal/dcraw common.cpp component of the LibRaw image processing library. This can be exploited to execute arbitrary code. The vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For versions prior to 0.18.9, update to version 0.18.9 or later to resolve the issue. As a temporary workaround, consider disabling the find green() function until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2018-1695
DLA-1734-1
DLA-2903-1
OPENSUSE-SU-2018_4299-1
SUSE-SU-2019:0002-1
USN-3838-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾