Описание
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.0.6-1 |
| esm-infra-legacy/trusty | released | 4.0.3-7ubuntu0.4 |
| esm-infra/xenial | not-affected | 4.0.6-1 |
| precise | released | 3.9.5-2ubuntu1.9 |
| precise/esm | not-affected | 3.9.5-2ubuntu1.9 |
| trusty | released | 4.0.3-7ubuntu0.4 |
| trusty/esm | released | 4.0.3-7ubuntu0.4 |
| upstream | released | 4.0.6-1 |
| vivid | ignored | end of life |
| vivid/stable-phone-overlay | ignored | end of life |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
The NeXTDecode function in tif_next.c in LibTIFF allows remote attacke ...
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
Уязвимость библиотеки LibTIFF, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3