USN-3989-1: LibRaw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libraw16to a version that resolves this vulnerability.Fixed in 0.18.13-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libraw16to a version that resolves this vulnerability.Fixed in 0.18.8-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libraw15to a version that resolves this vulnerability.Fixed in 0.17.1-1ubuntu0.5
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-3989-1?
The severity of USN-3989-1 is high.
What is the vulnerability ID of USN-3989-1?
The vulnerability ID of USN-3989-1 is CVE-2018-20337, CVE-2018-20363, CVE-2018-20364.
How can an attacker exploit the vulnerability in USN-3989-1?
An attacker can exploit the vulnerability in USN-3989-1 by tricking a user or automated system into processing a specially crafted photo file.
What is the impact of the vulnerability in USN-3989-1?
The impact of the vulnerability in USN-3989-1 is that it can cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
How can I fix the vulnerability in USN-3989-1?
To fix the vulnerability in USN-3989-1, update your libraw16 package to version 0.18.13-1ubuntu0.1 or higher.