SB2018081020 - OpenSUSE Linux update for libraw

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2018-5807)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to an out-of-bounds read condition within the "samsung_load_raw()" function (internal/dcraw_common.cpp) . A local attacker can supply a specially crafted input and cause the service to crash.

2) Heap-based buffer overflow (CVE-ID: CVE-2018-5810)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to a boundary error within the rollei_load_raw() function, as defined in the internal/dcraw_common.cpp source code file in LibRaw versions prior to 0.18.9. A local attacker can supply a specially crafted input, trigger heap-based buffer overflow and cause the service to crash.

3) Out-of-bounds read (CVE-ID: CVE-2018-5811)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to an out-of-bounds read condition in the nikon_coolscan_load_raw() function, as defined in the internal/dcraw_common.cpp source code file  in LibRaw versions prior to 0.18.9. A local attacker can supply a specially crafted input and cause the service to crash.

4) NULL pointer dereference (CVE-ID: CVE-2018-5812)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to insufficient validation of user-supplied input processed by the nikon_coolscan_load_raw() function, as defined in the internal/dcraw_common.cpp source code file in LibRaw versions prior to 0.18.9. A local attacker can supply a specially crafted input, trigger a NULL pointer dereference and cause the service to crash.

5) Infinite loop (CVE-ID: CVE-2018-5813)

The vulnerability allows a remote attacker to cause DoS condition.

The vulnerability exists due to due to improper parsing of files by the parse_minolta() function, as defined in the dcraw.c source code file of the affected software. A remote attacker can send trick the victim into accessing a file that submits malicious input, trigger an infinite loop condition that causes the affected software to crash or become unresponsive.

6) Infinite loop (CVE-ID: CVE-2018-5815)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to integer overflow condition in the parse_qt()function, as defined in the internal/dcraw_common.cpp source code file in LibRaw versions prior to 0.18.12. A remote attacker can trick the victim into processing a specially crafted Apple QuickTime file, trigger an infinite loop condition and cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00032.html