Summary
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | tiff | 4.0.3-7ubuntu0.9 |
| Ubuntu · 16.04 LTS 16.04:LTS | tiff | 4.0.6-1ubuntu0.4 |
Vulnerabilities 12
-
Medium 4.0
In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHei…
-
Unscored —
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial …
-
Unscored —
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attacker…
-
Unscored —
Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to cras…
-
Unscored —
In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a d…
-
Unscored —
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which a…
-
Unscored —
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-…
-
Unscored —
In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated b…
-
Unscored —
LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution vi…
-
Unscored —CVE-2017-9147 Public exploit
LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to ca…
-
Unscored —
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ov…
-
Unscored —
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote a…
References
-
report
https://ubuntu.com/security/CVE-2016-3186
-
report
https://ubuntu.com/security/CVE-2016-5102
-
report
https://ubuntu.com/security/CVE-2016-5318
-
report
https://ubuntu.com/security/CVE-2017-5563
-
report
https://ubuntu.com/security/CVE-2017-9117
-
report
https://ubuntu.com/security/CVE-2017-9147
-
report
https://ubuntu.com/security/CVE-2017-9935
-
report
https://ubuntu.com/security/CVE-2017-11613
-
report
https://ubuntu.com/security/CVE-2017-12944
-
report
https://ubuntu.com/security/CVE-2017-17095
-
report
https://ubuntu.com/security/CVE-2017-18013
-
report
https://ubuntu.com/security/CVE-2018-5784