Lucene search
HistorySep 28, 2013 - 7:55 p.m.
CVE-2013-4244
cve-2013-4244
lzw decompressor
libtiff 4.0.3
denial of service
out-of-bounds write
execute arbitrary code
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.3%
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
Affected configurations
Node
libtifflibtiffRange≤4.0.3
ORlibtifflibtiffMatch3.4
ORlibtifflibtiffMatch3.4beta18
ORlibtifflibtiffMatch3.4beta24
ORlibtifflibtiffMatch3.4beta28
ORlibtifflibtiffMatch3.4beta29
ORlibtifflibtiffMatch3.4beta31
ORlibtifflibtiffMatch3.4beta32
ORlibtifflibtiffMatch3.4beta34
ORlibtifflibtiffMatch3.4beta35
ORlibtifflibtiffMatch3.4beta36
ORlibtifflibtiffMatch3.4beta37
ORlibtifflibtiffMatch3.5.1
ORlibtifflibtiffMatch3.5.2
ORlibtifflibtiffMatch3.5.3
ORlibtifflibtiffMatch3.5.4
ORlibtifflibtiffMatch3.5.5
ORlibtifflibtiffMatch3.5.6
ORlibtifflibtiffMatch3.5.6beta
ORlibtifflibtiffMatch3.5.7
ORlibtifflibtiffMatch3.5.7alpha
ORlibtifflibtiffMatch3.5.7alpha2
ORlibtifflibtiffMatch3.5.7alpha3
ORlibtifflibtiffMatch3.5.7alpha4
ORlibtifflibtiffMatch3.5.7beta
ORlibtifflibtiffMatch3.6.0
ORlibtifflibtiffMatch3.6.0beta
ORlibtifflibtiffMatch3.6.0beta2
ORlibtifflibtiffMatch3.6.1
ORlibtifflibtiffMatch3.7.0
ORlibtifflibtiffMatch3.7.0alpha
ORlibtifflibtiffMatch3.7.0beta
ORlibtifflibtiffMatch3.7.0beta2
ORlibtifflibtiffMatch3.7.1
ORlibtifflibtiffMatch3.7.2
ORlibtifflibtiffMatch3.7.3
ORlibtifflibtiffMatch3.7.4
ORlibtifflibtiffMatch3.8.0
ORlibtifflibtiffMatch3.8.1
ORlibtifflibtiffMatch3.8.2
ORlibtifflibtiffMatch3.9
ORlibtifflibtiffMatch3.9.0
ORlibtifflibtiffMatch3.9.0beta
ORlibtifflibtiffMatch3.9.1
ORlibtifflibtiffMatch3.9.2
ORlibtifflibtiffMatch3.9.2-5.2.1
ORlibtifflibtiffMatch3.9.3
ORlibtifflibtiffMatch3.9.4
ORlibtifflibtiffMatch3.9.5
ORlibtifflibtiffMatch4.0
ORlibtifflibtiffMatch4.0alpha
ORlibtifflibtiffMatch4.0beta1
ORlibtifflibtiffMatch4.0beta2
ORlibtifflibtiffMatch4.0beta3
ORlibtifflibtiffMatch4.0beta4
ORlibtifflibtiffMatch4.0beta5
ORlibtifflibtiffMatch4.0beta6
ORlibtifflibtiffMatch4.0.1
ORlibtifflibtiffMatch4.0.2
Related
nessus
nessus
Mandriva Linux Security Advisory : libtiff (MDVSA-2013:224)
2013-09-03 00:00:00
Fedora 19 : libtiff-4.0.3-9.fc19 (2013-15679)
2013-09-07 00:00:00
Fedora 18 : libtiff-4.0.3-9.fc18 (2013-15673)
2013-09-19 00:00:00
cvelist
cvelist
CVE-2013-4244
2013-09-28 19:00:00
debiancve
debiancve
CVE-2013-4244
2013-09-28 19:55:03
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0267)
2022-01-28 00:00:00
Fedora Update for libtiff FEDORA-2013-15679
2013-09-12 00:00:00
Fedora Update for libtiff FEDORA-2013-15679
2013-09-12 00:00:00
ubuntucve
ubuntucve
CVE-2013-4244
2013-09-28 00:00:00
prion
prion
Out-of-bounds
2013-09-28 19:55:00
mageia
mageia
Updated libtiff packages fix CVE-2013-4244
2013-08-30 21:40:20
nvd
nvd
CVE-2013-4244
2013-09-28 19:55:03
securityvulns
securityvulns
[SECURITY] [DSA 2744-1] tiff security update
2013-08-28 00:00:00
libtiff multiple security vulnerabilities
2013-08-28 00:00:00
osv
osv
tiff - several
2013-08-27 00:00:00
debian
debian
[SECURITY] [DSA 2744-1] tiff security update
2013-08-27 15:27:12
fedora
fedora
[SECURITY] Fedora 19 Update: libtiff-4.0.3-9.fc19
2013-09-07 01:25:59
[SECURITY] Fedora 19 Update: libtiff-4.0.3-10.fc19
2014-06-10 03:07:40
[SECURITY] Fedora 18 Update: libtiff-4.0.3-9.fc18
2013-09-18 12:58:47
amazon
amazon
Medium: libtiff
2014-06-26 10:31:00
Medium: libtiff
2014-03-13 18:13:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2014-05-06 00:00:00
f5
f5
K16715 : Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
SOL16715 - Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
oraclelinux
oraclelinux
libtiff security update
2014-02-27 00:00:00
libtiff security update
2014-02-27 00:00:00
libtiff security update
2016-08-02 00:00:00
centos
centos
libtiff security update
2014-02-28 00:37:27
libtiff security update
2014-02-28 00:43:50
redhat
redhat
(RHSA-2014:0223) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0222) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0339) Important: rhev-hypervisor6 security update
2014-03-31 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2014-02-21 00:00:00
slackware
slackware
[slackware-security] libtiff
2013-10-18 19:38:32
altlinux
altlinux
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.3%
Related for CVE-2013-4244