NULL pointer dereference in LibRaw - CVE-2018-5806

Vulnerability identifier: #VU16343

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-5806

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to an error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp).  A local attacker can submit specially crafted images, trigger NULL pointer dereference and cause the service to crash.

LibRaw
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Power
Opensuse

Update to version 0.18.8.

LibRaw - update to 0.18.8

• https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff

• Denial of service in libraw
• OpenSUSE Linux update for libraw
• Red Hat update for libkdcraw