Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-5316

Опубликовано: 15 июн. 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libtiffWill not fix
Red Hat Enterprise Linux 6libtiffNot affected
Red Hat Enterprise Linux 7compat-libtiff3Not affected
Red Hat Enterprise Linux 7libtiffNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1346690libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c

EPSS

Процентиль: 81%
0.02186
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

CVSS3: 6.5
nvd
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

CVSS3: 6.5
debian
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c i ...

CVSS3: 6.5
github
больше 4 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

suse-cvrf
почти 10 лет назад

Security update for tiff

EPSS

Процентиль: 81%
0.02186
Низкий

4.3 Medium

CVSS2