CVE-2018-5817

A type confusion error within the "unpackedloadraw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "8.0"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/libraw/libraw

Affected ranges

Type

GIT

Repo

https://github.com/libraw/libraw

Events

Introduced

Fixed

e12cae8cbc7c73a7200f6e7621d71e113885ea72

Database specific

{
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.19.1"
        }
    ]
}

Affected versions

0.*

0.12.0

0.13.0

0.13.1

0.13.2

0.13.3

0.13.4

0.13.5

0.13.6

0.14.0

0.14.1

0.14.2

0.14.3

0.14.4

0.14.5

0.14.6

0.15.0

0.16.0

0.17.0

0.18.0

0.19.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-5817.json"