Lucene search
Veracode Vulnerability DatabaseVERACODE:6273HistoryMay 10, 2018 - 8:50 a.m.
Denial Of Service (DoS)
2018-05-1008:50:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.007 Low
EPSS
Percentile
81.0%
libtiff.so is vulnerable to denial of service (DoS) attacks. A malicious user can pass a tiff file to the TIFFWriteDirectory function in tif_dirwrite.c to cause an assertion failure and application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff.so | eq | 3.9.4 | |
| libtiff | le | 4.0.6.2 |
References
bugzilla.maptools.org/show_bug.cgi?id=2712
bugzilla.maptools.org/show_bug.cgi?id=2795
access.redhat.com/errata/RHSA-2019:2053
github.com/vadz/libtiff/commit/371336daa888321de62cf52461c6dc5287e12d05
lists.debian.org/debian-lts-announce/2018/07/msg00002.html
usn.ubuntu.com/3864-1/
www.debian.org/security/2018/dsa-4349
Related
nessus
nessus
Photon OS 2.0: Libtiff PHSA-2018-2.0-0060
2019-02-07 00:00:00
Photon OS 2.0 : libtiff / glibc / libsoup (PhotonOS-PHSA-2018-2.0-0060) (deprecated)
2018-07-24 00:00:00
Fedora 28 : libtiff (2018-d41d114d3e)
2019-01-03 00:00:00
osv
osv
CVE-2018-10963
2018-05-10 02:29:00
tiff - security update
2018-07-02 00:00:00
tiff - security update
2018-11-30 00:00:00
alpinelinux
alpinelinux
CVE-2018-10963
2018-05-10 02:29:00
debiancve
debiancve
CVE-2018-10963
2018-05-10 02:29:00
redhatcve
redhatcve
CVE-2018-10963
2018-05-16 22:49:00
nvd
nvd
CVE-2018-10963
2018-05-10 02:29:00
cve
cve
CVE-2018-10963
2018-05-10 02:29:00
ubuntucve
ubuntucve
CVE-2018-10963
2018-05-09 00:00:00
prion
prion
Code injection
2018-05-10 02:29:00
cvelist
cvelist
CVE-2018-10963
2018-05-10 02:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0246)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:1889-1)
2021-06-09 00:00:00
Slackware: Security Advisory (SSA:2018-316-01)
2022-04-21 00:00:00
photon
photon
mageia
mageia
Updated libtiff packages fix security vulnerabilities
2018-05-16 11:24:56
slackware
slackware
[slackware-security] libtiff
2018-11-13 05:52:20
suse
suse
Security update for tiff (moderate)
2018-07-14 00:09:06
Security update for tiff (moderate)
2018-06-28 15:08:17
fedora
fedora
[SECURITY] Fedora 28 Update: libtiff-4.0.9-9.fc28
2018-06-06 13:33:54
[SECURITY] Fedora 27 Update: libtiff-4.0.9-9.fc27
2018-06-06 12:59:38
[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28
2018-06-15 15:52:15
cloudfoundry
cloudfoundry
USN-3864-1: LibTIFF vulnerabilities | Cloud Foundry
2019-01-24 00:00:00
debian
debian
[SECURITY] [DLA 1411-1] tiff security update
2018-07-02 14:49:43
[SECURITY] [DSA 4349-1] tiff security update
2018-11-30 22:41:54
ubuntu
ubuntu
LibTIFF vulnerabilities
2019-01-22 00:00:00
redhat
redhat
(RHSA-2019:2053) Moderate: libtiff security update
2019-08-06 07:56:00
centos
centos
libtiff security update
2019-08-30 03:31:24
archlinux
archlinux
[ASA-201811-18] lib32-libtiff: multiple issues
2018-11-20 00:00:00
oraclelinux
oraclelinux
libtiff security update
2019-08-13 00:00:00
f5
f5
amazon
amazon
Medium: libtiff
2019-10-08 21:06:00
Medium: libtiff
2019-10-21 18:01:00
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01