Lucene search
PRIOn knowledge basePRION:CVE-2017-9935HistoryJun 26, 2017 - 12:29 p.m.
Heap overflow
2017-06-2612:29:00
PRIOn knowledge base
www.prio-n.com
9
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 17.10 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| debian_linux | eq | 9.0 | |
| libtiff | le | 4.0.8 |
Related
nessus
nessus
Debian DLA-1206-1 : tiff security update
2017-12-13 00:00:00
Photon OS 2.0: Libtiff PHSA-2018-2.0-0016
2019-02-07 00:00:00
EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-1683)
2019-07-02 00:00:00
cve
cve
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
ubuntucve
ubuntucve
CVE-2017-9935
2017-06-26 00:00:00
CVE-2018-17795
2018-09-30 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2019-1700)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2019-1683)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-1206-1)
2023-03-08 00:00:00
redhatcve
redhatcve
CVE-2017-9935
2020-04-08 16:49:09
CVE-2018-17795
2020-04-03 01:54:44
osv
osv
tiff - security update
2017-12-13 00:00:00
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
debiancve
debiancve
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
debian
debian
[SECURITY] [DLA 1206-1] tiff security update
2017-12-13 06:00:09
[SECURITY] [DSA 4100-1] tiff security update
2018-01-27 16:48:31
alpinelinux
alpinelinux
CVE-2017-9935
2017-06-26 12:29:00
veracode
veracode
Denial Of Service (DoS) Through Heap Buffer Overflow
2018-04-12 02:30:38
cvelist
cvelist
CVE-2017-9935
2017-06-26 12:00:00
CVE-2018-17795
2018-09-30 20:00:00
nvd
nvd
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
freebsd
freebsd
tiff -- multiple vulnerabilities
2017-06-22 00:00:00
prion
prion
Heap overflow
2018-09-30 20:29:00
mageia
mageia
Updated libtiff packages fix security vulnerability
2018-02-06 09:25:44
archlinux
archlinux
[ASA-201811-17] libtiff: multiple issues
2018-11-20 00:00:00
[ASA-201811-18] lib32-libtiff: multiple issues
2018-11-20 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libtiff-4.0.9-9.fc28
2018-06-06 13:33:54
[SECURITY] Fedora 27 Update: libtiff-4.0.9-9.fc27
2018-06-06 12:59:38
[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28
2018-06-15 15:52:15
suse
suse
Security update for tiff (moderate)
2018-10-24 15:09:18
Security update for tiff (moderate)
2018-10-24 15:10:10
ubuntu
ubuntu
LibTIFF vulnerabilities
2018-03-26 00:00:00
cloudfoundry
cloudfoundry
USN-3606-1: LibTIFF vulnerabilities | Cloud Foundry
2018-05-02 00:00:00
photon
photon
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1896
2021-07-02 17:18:37