CVE-2017-7593

Опубликовано: 11 янв. 2017

Источник: redhat

CVSS3: 4.4

EPSS Низкий

Описание

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	libtiff	Will not fix
Red Hat Enterprise Linux 6	libtiff	Will not fix
Red Hat Enterprise Linux 7	compat-libtiff3	Will not fix
Red Hat Enterprise Linux 7	libtiff	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=1441246libtiff: tif_rawdata not properly initialized in tif_read.c

EPSS

Процентиль: 80%

0.02117

Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVE-2017-7593

CVSS3: 5.5

ubuntu

больше 9 лет назад

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

CVE-2017-7593

CVSS3: 5.5

nvd

больше 9 лет назад

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

CVE-2017-7593

CVSS3: 5.5

debian

больше 9 лет назад

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is proper ...

GHSA-2gp3-mqcp-8ch9

CVSS3: 5.5

github

около 4 лет назад

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

openSUSE-SU-2017:2635-1

suse-cvrf

почти 9 лет назад

Security update for tiff

EPSS

Процентиль: 80%

0.02117

Низкий

4.4 Medium

CVSS3