Summary
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | tiff | 4.0.3-7ubuntu0.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | tiff | 4.0.6-1ubuntu0.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | tiff | 4.0.9-5ubuntu0.1 |
Vulnerabilities 7
-
Unscored —
The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a deni…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal…
-
Unscored —
LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif…
-
Unscored —
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9…
-
Unscored —
In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF f…
References
-
report
https://ubuntu.com/security/CVE-2018-7456
-
report
https://ubuntu.com/security/CVE-2018-8905
-
report
https://ubuntu.com/security/CVE-2018-10963
-
report
https://ubuntu.com/security/CVE-2018-17100
-
report
https://ubuntu.com/security/CVE-2018-17101
-
report
https://ubuntu.com/security/CVE-2018-18557
-
report
https://ubuntu.com/security/CVE-2018-18661