OPENSUSE-SU-2019:0094-1: libraw&distro=openSUSE Leap 15.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2019:0094-1 is a vulnerability in libraw&distro=openSUSE Leap 15.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 23-03-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for libraw This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-20337: Fixed a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (bsc#1120519) - CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500) - CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499) - CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498) - CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515) - CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516) - CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517) This update was imported from the SUSE:SLE-15:Update update project.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- libraw&distro=openSUSE Leap 15.0< 0.18.9-lp150.2.6.1
1 vendor · 1 product
References
15 links- lists.opensuse.org/archives/…Advisory