Lucene search
HistorySep 10, 2013 - 7:55 p.m.
CVE-2013-4243
security
vulnerability
libtiff
buffer overflow
heap-based
nvd
cve-2013-4243
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.1 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.
Affected configurations
Node
libtifflibtiffRange≤4.0.3
ORlibtifflibtiffMatch3.4
ORlibtifflibtiffMatch3.4beta18
ORlibtifflibtiffMatch3.4beta24
ORlibtifflibtiffMatch3.4beta28
ORlibtifflibtiffMatch3.4beta29
ORlibtifflibtiffMatch3.4beta31
ORlibtifflibtiffMatch3.4beta32
ORlibtifflibtiffMatch3.4beta34
ORlibtifflibtiffMatch3.4beta35
ORlibtifflibtiffMatch3.4beta36
ORlibtifflibtiffMatch3.4beta37
ORlibtifflibtiffMatch3.5.1
ORlibtifflibtiffMatch3.5.2
ORlibtifflibtiffMatch3.5.3
ORlibtifflibtiffMatch3.5.4
ORlibtifflibtiffMatch3.5.5
ORlibtifflibtiffMatch3.5.6
ORlibtifflibtiffMatch3.5.6beta
ORlibtifflibtiffMatch3.5.7
ORlibtifflibtiffMatch3.5.7alpha
ORlibtifflibtiffMatch3.5.7alpha2
ORlibtifflibtiffMatch3.5.7alpha3
ORlibtifflibtiffMatch3.5.7alpha4
ORlibtifflibtiffMatch3.5.7beta
ORlibtifflibtiffMatch3.6.0
ORlibtifflibtiffMatch3.6.0beta
ORlibtifflibtiffMatch3.6.0beta2
ORlibtifflibtiffMatch3.6.1
ORlibtifflibtiffMatch3.7.0
ORlibtifflibtiffMatch3.7.0alpha
ORlibtifflibtiffMatch3.7.0beta
ORlibtifflibtiffMatch3.7.0beta2
ORlibtifflibtiffMatch3.7.1
ORlibtifflibtiffMatch3.7.2
ORlibtifflibtiffMatch3.7.3
ORlibtifflibtiffMatch3.7.4
ORlibtifflibtiffMatch3.8.0
ORlibtifflibtiffMatch3.8.1
ORlibtifflibtiffMatch3.8.2
ORlibtifflibtiffMatch3.9
ORlibtifflibtiffMatch3.9.0
ORlibtifflibtiffMatch3.9.0beta
ORlibtifflibtiffMatch3.9.1
ORlibtifflibtiffMatch3.9.2
ORlibtifflibtiffMatch3.9.2-5.2.1
ORlibtifflibtiffMatch3.9.3
ORlibtifflibtiffMatch3.9.4
ORlibtifflibtiffMatch3.9.5
ORlibtifflibtiffMatch4.0
ORlibtifflibtiffMatch4.0alpha
ORlibtifflibtiffMatch4.0beta1
ORlibtifflibtiffMatch4.0beta2
ORlibtifflibtiffMatch4.0beta3
ORlibtifflibtiffMatch4.0beta4
ORlibtifflibtiffMatch4.0beta5
ORlibtifflibtiffMatch4.0beta6
ORlibtifflibtiffMatch4.0.1
ORlibtifflibtiffMatch4.0.2
debiandebian_linuxMatch6.0
ORdebiandebian_linuxMatch7.0
Related
securityvulns
securityvulns
[SECURITY] [DSA 2965-1] tiff security update
2014-06-26 00:00:00
gif2tiff buffer overflow
2014-06-26 00:00:00
debian
debian
[SECURITY] [DSA 2965-1] tiff security update
2014-06-22 07:00:35
[SECURITY] [DSA 2965-1] tiff security update
2014-06-22 07:00:35
tiff security update
2014-07-01 18:01:35
prion
prion
Heap overflow
2013-09-10 19:55:00
nvd
nvd
CVE-2013-4243
2013-09-10 19:55:11
nessus
nessus
Debian DSA-2965-1 : tiff - security update
2014-06-23 00:00:00
Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2205-1)
2014-05-07 00:00:00
osv
osv
tiff - security update
2014-07-01 00:00:00
tiff - security update
2014-06-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-0013-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 2965-1 (tiff - security update)
2014-06-22 00:00:00
Debian: Security Advisory (DSA-2965-1)
2014-06-21 00:00:00
debiancve
debiancve
CVE-2013-4243
2013-09-10 19:55:11
cvelist
cvelist
CVE-2013-4243
2013-09-10 19:00:00
ubuntucve
ubuntucve
CVE-2013-4243
2013-09-10 00:00:00
mageia
mageia
Updated libtiff package fixes security vulnerability
2013-09-25 01:43:52
fedora
fedora
[SECURITY] Fedora 20 Update: libtiff-4.0.3-15.fc20
2014-05-28 23:52:12
[SECURITY] Fedora 19 Update: libtiff-4.0.3-10.fc19
2014-06-10 03:07:40
[SECURITY] Fedora 19 Update: mingw-libtiff-4.0.3-4.fc19
2014-06-10 03:14:08
amazon
amazon
Medium: libtiff
2014-06-26 10:31:00
Medium: libtiff
2014-03-13 18:13:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2014-05-06 00:00:00
oraclelinux
oraclelinux
libtiff security update
2014-02-27 00:00:00
libtiff security update
2014-02-27 00:00:00
libtiff security update
2016-08-02 00:00:00
centos
centos
libtiff security update
2014-02-28 00:37:27
libtiff security update
2014-02-28 00:43:50
f5
f5
SOL16715 - Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
K16715 : Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
redhat
redhat
(RHSA-2014:0223) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0222) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0339) Important: rhev-hypervisor6 security update
2014-03-31 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
altlinux
altlinux
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2017-01-09 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.1 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Related for CVE-2013-4243