CVE-2014-8128

Опубликовано: 12 фев. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

Ссылки

http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2015/01/24/15
Mailing List
Third Party Advisory
http://support.apple.com/kb/HT204941
Third Party Advisory
http://support.apple.com/kb/HT204942
Third Party Advisory
http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185812
Issue Tracking
Patch
Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2015/01/24/15
Mailing List
Third Party Advisory
http://support.apple.com/kb/HT204941
Third Party Advisory
http://support.apple.com/kb/HT204942
Third Party Advisory
http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185812
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Версия до 4.0.4 (исключая)

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 8.4 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.10.4 (исключая)

EPSS

Процентиль: 81%

0.01463

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2014-8128

CVSS3: 6.5

ubuntu

почти 6 лет назад

CVE-2014-8128

redhat

около 11 лет назад

CVE-2014-8128

CVSS3: 6.5

debian

почти 6 лет назад

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X befor ...

GHSA-c668-q57x-6hjh

github

больше 3 лет назад

openSUSE-SU-2018:0097-1

suse-cvrf

около 8 лет назад

Security update for tiff

EPSS

Процентиль: 81%

0.01463

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787