Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-9538

Опубликовано: 22 нояб. 2016
Источник: debian
EPSS Низкий

Описание

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tifffixed4.0.7-1package
tiff3not-affectedpackage

Примечания

  • https://github.com/vadz/libtiff/commit/43c0b81a818640429317c80fea1e66771e85024b#diff-c8b4b355f9b5c06d585b23138e1c185f

EPSS

Процентиль: 61%
0.00416
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 9 лет назад

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

CVSS3: 3.3
redhat
больше 9 лет назад

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

CVSS3: 9.8
nvd
около 9 лет назад

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

CVSS3: 9.8
github
больше 3 лет назад

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

EPSS

Процентиль: 61%
0.00416
Низкий