Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-17795

Опубликовано: 02 окт. 2018
Источник: redhat
CVSS3: 4.3

Описание

The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libtiffNot affected
Red Hat Enterprise Linux 6libtiffNot affected
Red Hat Enterprise Linux 7compat-libtiff3Not affected
Red Hat Enterprise Linux 7libtiffNot affected
Red Hat Enterprise Linux 8libtiffNot affected
Red Hat Enterprise Linux 8mingw-libtiffNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1635091libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.

CVSS3: 8.8
nvd
больше 7 лет назад

The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.

CVSS3: 8.8
debian
больше 7 лет назад

The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier ...

CVSS3: 8.8
github
больше 3 лет назад

The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.

CVSS3: 8.8
fstec
больше 7 лет назад

Уязвимость функции t2p_write_pdf библиотеки LibTIFF, позволяющая нарушителю вызвать отказ в обслуживании

4.3 Medium

CVSS3