Published: 29/08/2017 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.8

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code For the oldstable distribution (jessie), these problems have been fixed in version 403-123+deb8u5 For the stable distribution (stretch), these problems have been fixed in version ...

Debian Bug report logs - #866109 tiff: CVE-2017-9935: Heap-based buffer overflow in t2p_write_pdf Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Jun 2017 12:21:01 UTC Severity: grave Tags: fixed-upstream, sec ...

Debian Bug report logs - #873879 tiff: CVE-2017-13727 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 31 Aug 2017 20:21:04 UTC Severity: important Tags: patch, security, upstream Found in version tiff/403-123 ...

Debian Bug report logs - #873880 tiff: CVE-2017-13726 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 31 Aug 2017 20:33:01 UTC Severity: important Tags: patch, security, upstream Found in version tiff/403-123 ...

Debian Bug report logs - #898348 tiff: CVE-2018-10963 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 10 May 2018 15:42:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in versions tiff/ ...

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 408, related to tif_dirwritec and a SubIFD tag A crafted input will lead to a remote denial of service attack ...

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF before 409, related to tif_dirwritec and a SubIFD tag A crafted input will lead to a remote denial of service attack ...

CWE-617 http://bugzilla.maptools.org/show_bug.cgi?id=2727 http://www.securityfocus.com/bid/100524 https://www.debian.org/security/2018/dsa-4100 https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://usn.ubuntu.com/3602-1/

CVE-2017-13726

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect