CVE-2018-5818: High severity Libraw Libraw vulnerability
Published Feb 20, 2019
·Updated
An error within the "parserollei()" function (internal/dcrawcommon.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
Affected Software
3 affected componentsFixes available
Libraw Libraw<0.19.1
Debian Debian Linux=8.0
debian/libraw
0.20.2-1+deb11u10.20.2-1+deb11u20.20.2-2.1+deb12u10.21.4-20.21.5b-1
Remediation
Event History
Feb 20, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:08 PM
Description
Feb 20, 2026
Data Sourced
via Ubuntu·07:01 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·07:02 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-5818.
2
What is the severity of CVE-2018-5818?
The severity of CVE-2018-5818 is high with a severity value of 7.5.
3
What is the affected software?
The affected software is LibRaw versions prior to 0.19.1.
4
How can the vulnerability be exploited?
The vulnerability can be exploited by triggering an infinite loop within the "parse_rollei()" function in LibRaw.
5
Is there a fix available for this vulnerability?
Yes, there are fixes available for this vulnerability. For Debian, the fix is available in versions 0.19.2-2 and later. For Ubuntu, the fix is available in versions 0.18.8-1ubuntu0.3 and later.