Lucene search
Veracode Vulnerability DatabaseVERACODE:6095HistoryApr 12, 2018 - 2:30 a.m.
Denial Of Service (DoS) Through Heap Buffer Overflow
2018-04-1202:30:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.004
Percentile
75.1%
libtiff.so is vulnerable to denial of service (DoS) through heap-based buffer overflow attacks. The vulnerability exists in the t2p_write_pdf function in tools/tiff2pdf.c where a malicious TIFF file can cause denial of service (DoS), and possibly other attacks.
References
bugzilla.maptools.org/show_bug.cgi?id=2704
www.securityfocus.com/bid/99296
bugzilla.suse.com/show_bug.cgi?id=1046077
github.com/vadz/libtiff/commit/3dd8f6a357981a4090f126ab9025056c938b6940
lists.debian.org/debian-lts-announce/2017/12/msg00008.html
usn.ubuntu.com/3606-1/
www.debian.org/security/2018/dsa-4100
Related
ubuntucve
ubuntucve
CVE-2017-9935
2017-06-26 00:00:00
CVE-2018-17795
2018-09-30 00:00:00
cve
cve
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
nessus
nessus
Debian DLA-1206-1 : tiff security update
2017-12-13 00:00:00
EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-1683)
2019-07-02 00:00:00
Photon OS 2.0: Libtiff PHSA-2018-2.0-0016
2019-02-07 00:00:00
redhatcve
redhatcve
CVE-2017-9935
2020-04-08 16:49:09
CVE-2018-17795
2020-04-03 01:54:44
osv
osv
tiff - security update
2017-12-13 00:00:00
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2019-1700)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2019-1683)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-1206-1)
2023-03-08 00:00:00
debiancve
debiancve
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
cvelist
cvelist
CVE-2017-9935
2017-06-26 12:00:00
CVE-2018-17795
2018-09-30 20:00:00
prion
prion
Heap overflow
2017-06-26 12:29:00
Heap overflow
2018-09-30 20:29:00
debian
debian
[SECURITY] [DLA 1206-1] tiff security update
2017-12-13 06:00:09
[SECURITY] [DSA 4100-1] tiff security update
2018-01-27 16:48:31
alpinelinux
alpinelinux
CVE-2017-9935
2017-06-26 12:29:00
nvd
nvd
CVE-2017-9935
2017-06-26 12:29:00
CVE-2018-17795
2018-09-30 20:29:00
freebsd
freebsd
tiff -- multiple vulnerabilities
2017-06-22 00:00:00
mageia
mageia
Updated libtiff packages fix security vulnerability
2018-02-06 09:25:44
archlinux
archlinux
[ASA-201811-17] libtiff: multiple issues
2018-11-20 00:00:00
[ASA-201811-18] lib32-libtiff: multiple issues
2018-11-20 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libtiff-4.0.9-9.fc28
2018-06-06 13:33:54
[SECURITY] Fedora 27 Update: libtiff-4.0.9-9.fc27
2018-06-06 12:59:38
[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28
2018-06-15 15:52:15
suse
suse
Security update for tiff (moderate)
2018-10-24 15:10:10
Security update for tiff (moderate)
2018-10-24 15:09:18
cloudfoundry
cloudfoundry
USN-3606-1: LibTIFF vulnerabilities | Cloud Foundry
2018-05-02 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2018-03-26 00:00:00
photon
photon
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1896
2021-07-02 17:18:37