- Vulnerability/
- USN-3989-1
USN-3989-1: LibRaw vulnerabilities
First published: Tue May 21 2019(Updated: )
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libraw16 | <0.18.13-1ubuntu0.1 | 0.18.13-1ubuntu0.1 |
| =18.10 | ||
| All of | ||
| ubuntu/libraw16 | <0.18.8-1ubuntu0.3 | 0.18.8-1ubuntu0.3 |
| =18.04 | ||
| All of | ||
| ubuntu/libraw15 | <0.17.1-1ubuntu0.5 | 0.17.1-1ubuntu0.5 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-20337
- https://ubuntu.com/security/CVE-2018-20363
- https://ubuntu.com/security/CVE-2018-20364
- https://ubuntu.com/security/CVE-2018-20365
- https://ubuntu.com/security/CVE-2018-5817
- https://ubuntu.com/security/CVE-2018-5818
- https://ubuntu.com/security/CVE-2018-5819
- https://launchpad.net/ubuntu/+source/libraw/0.18.13-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/libraw/0.18.8-1ubuntu0.3
- https://launchpad.net/ubuntu/+source/libraw/0.17.1-1ubuntu0.5
- https://ubuntu.com/security/notices/USN-3989-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-3989-1?
The severity of USN-3989-1 is high.
What is the vulnerability ID of USN-3989-1?
The vulnerability ID of USN-3989-1 is CVE-2018-20337, CVE-2018-20363, CVE-2018-20364.
How can an attacker exploit the vulnerability in USN-3989-1?
An attacker can exploit the vulnerability in USN-3989-1 by tricking a user or automated system into processing a specially crafted photo file.
What is the impact of the vulnerability in USN-3989-1?
The impact of the vulnerability in USN-3989-1 is that it can cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
How can I fix the vulnerability in USN-3989-1?
To fix the vulnerability in USN-3989-1, update your libraw16 package to version 0.18.13-1ubuntu0.1 or higher.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04