CVE-2018-5818

Reference Links

• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
• https://www.libraw.org/news/libraw-0-19-2-release
• https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
• https://usn.ubuntu.com/3989-1/
• https://launchpad.net/bugs/cve/CVE-2018-5818
• https://www.flexera.com/company/secunia-research/advisories/SR-2018-27.html
• https://github.com/LibRaw/LibRaw/commit/9eb76dc153f5acf42ec7325a33fe7ccdcadaf8d6
• https://security-tracker.debian.org/tracker/CVE-2018-5818
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5818
• https://ubuntu.com/security/notices/USN-3989-1
• https://nvd.nist.gov/vuln/detail/CVE-2018-5818
• https://ubuntu.com/security/CVE-2018-5818

Parent vulnerabilities

(Appears in the following advisories)

• USN-3989-1

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2018-5818.

• What is the severity of CVE-2018-5818?

  The severity of CVE-2018-5818 is high with a severity value of 7.5.

• What is the affected software?

  The affected software is LibRaw versions prior to 0.19.1.

• How can the vulnerability be exploited?

  The vulnerability can be exploited by triggering an infinite loop within the "parse_rollei()" function in LibRaw.

• Is there a fix available for this vulnerability?

  Yes, there are fixes available for this vulnerability. For Debian, the fix is available in versions 0.19.2-2 and later. For Ubuntu, the fix is available in versions 0.18.8-1ubuntu0.3 and later.