Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2015-7313

Published: 17/03/2017 Updated: 20/03/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Libtiff

Vulnerability Summary

LibTIFF allows remote malicious users to cause a denial of service (memory consumption and crash) via a crafted tiff file.

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff -

Vendor Advisories

Debian CVElist Bug Report Logs: tiff: CVE-2016-3622: Division by zero in fpAcc function
Debian Bug report logs - #820365 tiff: CVE-2016-3622: Division by zero in fpAcc function Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 7 Apr 2016 18:51:15 UTC Severity: important Tags: security, upstream Foun ...
Debian CVElist Bug Report Logs: tiff: CVE-2015-7313: OOM when parsing crafted tiff files
Debian Bug report logs - #800124 tiff: CVE-2015-7313: OOM when parsing crafted tiff files Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 27 Sep 2015 06:42:02 UTC Severity: important Tags: security, upstream Fou ...
Debian CVElist Bug Report Logs: tiff: CVE-2016-9273
Debian Bug report logs - #844013 tiff: CVE-2016-9273 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 11 Nov 2016 19:51:01 UTC Severity: grave Tags: fixed-upstream, patch, security, upstream Found in versions tif ...
Debian CVElist Bug Report Logs: tiff: CVE-2016-9297: potential read outside buffer in _TIFFPrintField()
Debian Bug report logs - #844226 tiff: CVE-2016-9297: potential read outside buffer in _TIFFPrintField() Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 13 Nov 2016 16:09:04 UTC Severity: normal Tags: fixed-upstr ...
Arch Linux Issues:
A denial of service flaw was found in the way libtiff parsed certain tiff files An attacker could use this flaw to create a specially crafted TIFF file that would cause an application using libtiff to exhaust all available memory on the system ...

References

CWE-399https://security.gentoo.org/glsa/201701-16https://bugzilla.redhat.com/show_bug.cgi?id=1265998http://www.securityfocus.com/bid/76843http://seclists.org/oss-sec/2015/q3/601https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820365https://security.archlinux.org/CVE-2015-7313
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook