vulnerability

SUSE: CVE-2018-5802: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 3, 2018
Added
Oct 24, 2018
Modified
Jun 20, 2021

Description

An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash.

Solutions

suse-upgrade-libraw-develsuse-upgrade-libraw-devel-staticsuse-upgrade-libraw9
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.