Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-3623

Опубликовано: 08 апр. 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

Отчет

Red Hat Product Security determined that this flaw was not a security vulnerability. See the Bugzilla link for more details.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libtiffNot affected
Red Hat Enterprise Linux 6libtiffNot affected
Red Hat Enterprise Linux 7compat-libtiff3Not affected
Red Hat Enterprise Linux 7libtiffNot affected

Показывать по

Дополнительная информация

Дефект:
CWE-369
https://bugzilla.redhat.com/show_bug.cgi?id=1325089libtiff: divide by zero in the rgb2ycybr tool

EPSS

Процентиль: 81%
0.01585
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 9 лет назад

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

CVSS3: 7.5
nvd
больше 9 лет назад

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

CVSS3: 7.5
debian
больше 9 лет назад

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attacker ...

CVSS3: 7.5
github
больше 3 лет назад

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

suse-cvrf
больше 9 лет назад

Security update for tiff

EPSS

Процентиль: 81%
0.01585
Низкий

4.3 Medium

CVSS2