Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.844017
Category:Ubuntu Local Security Checks
Title:Ubuntu: Security Advisory (USN-3989-1)
Summary:The remote host is missing an update for the 'libraw' package(s) announced via the USN-3989-1 advisory.
Description:Summary:
The remote host is missing an update for the 'libraw' package(s) announced via the USN-3989-1 advisory.

Vulnerability Insight:
It was discovered that LibRaw incorrectly handled photo files. If a user or
automated system were tricked into processing a specially crafted photo
file, a remote attacker could cause applications linked against LibRaw to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Affected Software/OS:
'libraw' package(s) on Ubuntu 16.04, Ubuntu 18.04, Ubuntu 18.10.

Solution:
Please install the updated package(s).

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-20337
https://github.com/LibRaw/LibRaw/issues/192
https://usn.ubuntu.com/3989-1/
Common Vulnerability Exposure (CVE) ID: CVE-2018-20363
BugTraq ID: 106299
http://www.securityfocus.com/bid/106299
https://github.com/LibRaw/LibRaw/issues/193
Common Vulnerability Exposure (CVE) ID: CVE-2018-20364
https://github.com/LibRaw/LibRaw/issues/194
Common Vulnerability Exposure (CVE) ID: CVE-2018-20365
https://github.com/LibRaw/LibRaw/issues/195
Common Vulnerability Exposure (CVE) ID: CVE-2018-5817
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
https://www.libraw.org/news/libraw-0-19-2-release
https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
Common Vulnerability Exposure (CVE) ID: CVE-2018-5818
Common Vulnerability Exposure (CVE) ID: CVE-2018-5819
CopyrightCopyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.