CVE-2018-5813: High severity Libraw Libraw vulnerability
Published Dec 7, 2018
·Updated
An error within the "parseminolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially crafted file.
Affected Software
5 affected componentsFixes available
Libraw Libraw<0.18.11
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
debian/libraw
0.20.2-1+deb11u10.20.2-1+deb11u20.20.2-2.1+deb12u10.21.4-20.21.5b-1
Remediation
Event History
Dec 7, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Data Sourced
via NVD·10:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:08 PM
Description
Feb 20, 2026
Data Sourced
via Ubuntu·08:26 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·08:27 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2018-5813?
CVE-2018-5813 is a vulnerability in the parse_minolta() function in LibRaw versions prior to 0.18.11 that can trigger an infinite loop.
2
How can CVE-2018-5813 be exploited?
CVE-2018-5813 can be exploited by using a specially crafted file to trigger the infinite loop in the parse_minolta() function.
3
What is the severity of CVE-2018-5813?
CVE-2018-5813 has a severity rating of 6.5 (high).
4
Which versions of LibRaw are affected by CVE-2018-5813?
LibRaw versions prior to 0.18.11 are affected by CVE-2018-5813.
5
How can I fix CVE-2018-5813?
To fix CVE-2018-5813, update to LibRaw version 0.18.11 or later.