Published: 21/12/2018 Updated: 24/08/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

It exists that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libraw libraw 0.19.1

Debian Bug report logs - #917080 libraw: CVE-2018-20337 Package: src:libraw; Maintainer for src:libraw is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 22 Dec 2018 09:51:01 UTC Severity: important Tags: fixed-upstream, se ...

Several security issues were fixed in LibRaw ...

Synopsis Moderate: GNOME security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for GNOME is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...

Synopsis Important: Container-native Virtualization security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 240 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Securi ...

Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...

There is a stack-based buffer overflow in the parse_makernote function of dcraw_commoncpp in LibRaw 0191 Crafted input will lead to a denial of service or possibly unspecified other impact ...

CWE-787 https://github.com/LibRaw/LibRaw/issues/192 https://usn.ubuntu.com/3989-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917080 https://usn.ubuntu.com/3989-1/https://nvd.nist.gov

CVE-2018-20337

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect