CVE Vulnerabilities

CVE-2018-20364

NULL Pointer Dereference

Published: Dec 22, 2018 | Modified: May 21, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Ubuntu
LOW

LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Libraw Libraw * 0.19.1 (including)
Darktable Ubuntu bionic *
Darktable Ubuntu cosmic *
Darktable Ubuntu disco *
Darktable Ubuntu eoan *
Darktable Ubuntu groovy *
Darktable Ubuntu hirsute *
Darktable Ubuntu impish *
Darktable Ubuntu kinetic *
Darktable Ubuntu lunar *
Darktable Ubuntu mantic *
Darktable Ubuntu trusty *
Darktable Ubuntu xenial *
Dcraw Ubuntu bionic *
Dcraw Ubuntu cosmic *
Dcraw Ubuntu disco *
Dcraw Ubuntu eoan *
Dcraw Ubuntu groovy *
Dcraw Ubuntu hirsute *
Dcraw Ubuntu impish *
Dcraw Ubuntu kinetic *
Dcraw Ubuntu lunar *
Dcraw Ubuntu mantic *
Dcraw Ubuntu trusty *
Dcraw Ubuntu xenial *
Exactimage Ubuntu bionic *
Exactimage Ubuntu cosmic *
Exactimage Ubuntu disco *
Exactimage Ubuntu eoan *
Exactimage Ubuntu groovy *
Exactimage Ubuntu hirsute *
Exactimage Ubuntu impish *
Exactimage Ubuntu kinetic *
Exactimage Ubuntu lunar *
Exactimage Ubuntu mantic *
Exactimage Ubuntu trusty *
Exactimage Ubuntu xenial *
Kodi Ubuntu bionic *
Kodi Ubuntu cosmic *
Kodi Ubuntu disco *
Kodi Ubuntu eoan *
Kodi Ubuntu groovy *
Kodi Ubuntu hirsute *
Kodi Ubuntu impish *
Kodi Ubuntu kinetic *
Kodi Ubuntu lunar *
Kodi Ubuntu mantic *
Kodi Ubuntu xenial *
Libraw Ubuntu bionic *
Libraw Ubuntu cosmic *
Libraw Ubuntu upstream *
Libraw Ubuntu xenial *
Rawtherapee Ubuntu bionic *
Rawtherapee Ubuntu cosmic *
Rawtherapee Ubuntu disco *
Rawtherapee Ubuntu eoan *
Rawtherapee Ubuntu groovy *
Rawtherapee Ubuntu hirsute *
Rawtherapee Ubuntu impish *
Rawtherapee Ubuntu kinetic *
Rawtherapee Ubuntu lunar *
Rawtherapee Ubuntu mantic *
Rawtherapee Ubuntu trusty *
Rawtherapee Ubuntu xenial *
Ufraw Ubuntu bionic *
Ufraw Ubuntu cosmic *
Ufraw Ubuntu disco *
Ufraw Ubuntu trusty *
Ufraw Ubuntu xenial *
Xbmc Ubuntu trusty *

Potential Mitigations

References