CVE-2018-19655

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 85.77%
Affected Products (NVD)
VendorProductVersion
dcraw_projectdcraw
𝑥
≤ 9.28
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dcraw
bookworm
9.28-3
fixed
bullseye
9.28-2
fixed
sid
9.28-7
fixed
trixie
9.28-7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dcraw
bionic
needs-triage
cosmic
Fixed 9.28-2
released
disco
Fixed 9.28-2
released
eoan
Fixed 9.28-2
released
focal
Fixed 9.28-2
released
groovy
Fixed 9.28-2
released
hirsute
Fixed 9.28-2
released
impish
Fixed 9.28-2
released
jammy
Fixed 9.28-2
released
kinetic
Fixed 9.28-2
released
lunar
Fixed 9.28-2
released
mantic
Fixed 9.28-2
released
noble
Fixed 9.28-2
released
oracular
Fixed 9.28-2
released
plucky
Fixed 9.28-2
released
questing
Fixed 9.28-2
released
resolute
Fixed 9.28-2
released
trusty
dne
xenial
ignored
ufraw
bionic
Fixed 0.22-3.1~build0.18.04.1
released
cosmic
Fixed 0.22-3.1~build0.18.14.1
released
disco
not-affected
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
dcraw
suse enterprise sap 12 SP5
9.28.0-3.3.1
fixed
suse enterprise server 12 SP5
9.28.0-3.3.1
fixed
suse enterprise workstation 12 SP5
9.28.0-3.3.1
fixed
dcraw-lang
suse enterprise sap 12 SP5
9.28.0-3.3.1
fixed
suse enterprise server 12 SP5
9.28.0-3.3.1
fixed
suse enterprise workstation 12 SP5
9.28.0-3.3.1
fixed
Common Weakness Enumeration
References
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906529
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3JX4A5F4DWP6NOEULXQXZ5AIH4GA62U/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD65NMWZ5OQNUIF7CLGKLDG4LVPPMJY7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XK4SHVVIZT6FHJVHOQSAFJMQWDLMWKDE/
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906529
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3JX4A5F4DWP6NOEULXQXZ5AIH4GA62U/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD65NMWZ5OQNUIF7CLGKLDG4LVPPMJY7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XK4SHVVIZT6FHJVHOQSAFJMQWDLMWKDE/