CVE-2018-5804

A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero.

References

Affected packages

Debian:11 / libraw

Package

Name: libraw
Purl: pkg:deb/debian/libraw?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.18.8-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / libraw

Package

Name: libraw
Purl: pkg:deb/debian/libraw?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.18.8-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / libraw

Package

Name: libraw
Purl: pkg:deb/debian/libraw?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.18.8-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:14 / libraw

Package

Name: libraw
Purl: pkg:deb/debian/libraw?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.18.8-1

Ecosystem specific

{
    "urgency": "low"
}

Git / github.com/libraw/libraw

Affected ranges

Type: GIT
Repo: https://github.com/libraw/libraw
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

9f26ce37f5be86ea11bfc6831366558650b1f6ff

Affected versions

0.*

0.11.0-Release

0.11.1

0.11.2

0.12.0

0.12.1

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.13.7

0.13.8

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

0.18.1

0.18.2

0.18.3

0.18.4

0.18.5

0.18.6

0.18.7