Описание
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
A vulnerability was found in LibTIFF, where a memory leak in the TIFFFdOpen function within tif_unix.c could lead to a denial of service, where a remote attacker could exploit this flaw by tricking a user into opening a specially crafted file, causing increased memory consumption and potential application instability over time.
Отчет
This vulnerability is rated as moderate because a memory leak in LibTIFF’s TIFFFdOpen function within tif_unix.c could lead to a denial of service, exploitation requires user interaction, as an attacker must persuade a victim to open a specially crafted file. While this does not lead to code execution, repeated exploitation could impact application availability.
Меры по смягчению последствий
This bug could be mitigated by configuring process memory limits using cgroups.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libtiff | Will not fix | ||
| Red Hat Enterprise Linux 6 | libtiff | Will not fix | ||
| Red Hat Enterprise Linux 7 | libtiff | Will not fix | ||
| Red Hat Enterprise Linux 8 | libtiff | Will not fix | ||
| Red Hat Enterprise Linux 8 | mingw-libtiff | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory l ...
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
EPSS
6.5 Medium
CVSS3