Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-8128

Опубликовано: 07 дек. 2014
Источник: redhat
CVSS2: 3.6
EPSS Низкий

Описание

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

Отчет

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libtiffWill not fix
Red Hat Enterprise Linux 6libtiffWill not fix
Red Hat Enterprise Linux 7libtiffWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1185812libtiff: out-of-bounds write in multiple tools

EPSS

Процентиль: 81%
0.01463
Низкий

3.6 Low

CVSS2

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 6 лет назад

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

CVSS3: 6.5
nvd
почти 6 лет назад

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

CVSS3: 6.5
debian
почти 6 лет назад

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X befor ...

github
больше 3 лет назад

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

suse-cvrf
около 8 лет назад

Security update for tiff

EPSS

Процентиль: 81%
0.01463
Низкий

3.6 Low

CVSS2