Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2020-18768

Published: 22/08/2023 Updated: 25/08/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Libtiff

Vulnerability Summary

There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an malicious user to cause a denial-of-service through a crafted tiff file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 4.0.10

Vendor Advisories

Amazon Linux 2: ALAS2-2023-2300
There exists one heap buffer overflow in _TIFFmemcpy in tif_unixc in libtiff 4010, which allows an attacker to cause a denial-of-service through a crafted tiff file (CVE-2020-18768) A heap buffer overflow in ExtractImageSection function in tiffcropc in libtiff library Version 430 allows attacker to trigger unsafe or out of bounds memory acce ...

References

CWE-787http://bugzilla.maptools.org/show_bug.cgi?id=2848https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2023-2300.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook