Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6387
HistoryMay 25, 2018 - 8:39 a.m.

Denial Of Service (DoS)

2018-05-2508:39:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.006 Low

EPSS

Percentile

78.2%

libtiff.so is vulnerable to denial of service (DoS) attacks. A malicious user can pass a tiff file to the TIFFWriteDirectoryTagSubifd function in tif_dirwrite.c to cause an assertion abort that can crash the application.

CPENameOperatorVersion
libtiff.sole5.6.0
libtiffle4.0.6.2