Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5317

Опубликовано: 20 янв. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01962
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 9 лет назад

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

redhat
около 10 лет назад

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

CVSS3: 6.5
debian
больше 9 лет назад

Buffer overflow in the PixarLogDecode function in libtiff.so in the Pi ...

CVSS3: 6.5
github
больше 4 лет назад

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

suse-cvrf
почти 10 лет назад

Security update for tiff

EPSS

Процентиль: 79%
0.01962
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119