Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8mr-cwrg-5x9h

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

EPSS

Процентиль: 72%
0.00737
Низкий

7.4 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.4
ubuntu
почти 9 лет назад

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

CVSS3: 4.4
redhat
почти 11 лет назад

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

CVSS3: 7.4
nvd
почти 9 лет назад

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

CVSS3: 7.4
debian
почти 9 лет назад

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows re ...

oracle-oval
почти 9 лет назад

ELSA-2017-0225: libtiff security update (MODERATE)

EPSS

Процентиль: 72%
0.00737
Низкий

7.4 High

CVSS3

Дефекты

CWE-20