[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2018-5801":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":38,"references":45,"score":53,"epss_score":54,"epss_percentile":55,"is_kev":56,"cisa_kev_date_added":57,"cisa_kev_due_date":57,"cisa_ssvc":58,"attack_mappings":64,"exploits":71},232325,"CVE-2018-5801","EUVD-2018-17568","An error within the \"LibRaw::unpack()\" function (src\u002Flibraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.","2018-12-07T22:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":15,"accessComplexity":16,"availabilityImpact":17,"confidentialityImpact":15},"2.0",4.3,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NONE","MEDIUM","PARTIAL",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":16,"vectorString":22,"integrityImpact":15,"userInteraction":23,"attackComplexity":24,"availabilityImpact":25,"privilegesRequired":15,"confidentialityImpact":15},"UNCHANGED","3.0",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H","REQUIRED","LOW","HIGH",true,[28],"CWE-476",[30,31,32,33,34,35,36,37],"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",[39,40,41,42,43,44],"Redhat Enterprise Linux Server","Canonical Ubuntu Linux","Redhat Enterprise Linux Workstation","Redhat Enterprise Linux Desktop","Debian Debian Linux","Libraw Libraw",[46,47,48,49,50,51,52],"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3065","https:\u002F\u002Fgithub.com\u002FLibRaw\u002FLibRaw\u002Fblob\u002Fmaster\u002FChangelog.txt","https:\u002F\u002Fgithub.com\u002FLibRaw\u002FLibRaw\u002Fcommit\u002F0df5490b985c419de008d32168650bff17128914","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F03\u002Fmsg00036.html","https:\u002F\u002Fsecuniaresearch.flexerasoftware.com\u002Fadvisories\u002F79000\u002F","https:\u002F\u002Fsecuniaresearch.flexerasoftware.com\u002Fsecunia_research\u002F2018-1\u002F","https:\u002F\u002Fusn.ubuntu.com\u002F3615-1\u002F",0.53,0.02039,0.80988,false,null,{"timestamp":57,"automatable":59,"tech_impact":60,"exploitation":61,"cisa_decision":62,"cisa_remediation_timeline":63},"no","partial","none",{},"FSU",[65],{"name":66,"source":67,"tactics":68,"technique_id":70},"Exploit Public-Facing Application","attack_vector",[69],"initial-access","T1190",[]]