CVE-2015-1547

2016-04-1300:00:00

ubuntu.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to
cause a denial of service (uninitialized memory access) via a crafted TIFF
image, as demonstrated by libtiff5.tif.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777390>

Notes

Author	Note
mdeslaur	Fix included in CVE-2014-9655-2

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchtiff< 3.9.2-2ubuntu0.15UNKNOWN
ubuntu12.04noarchtiff< 3.9.5-2ubuntu1.7UNKNOWN
ubuntu14.04noarchtiff< 4.0.3-7ubuntu0.2UNKNOWN
ubuntu14.10noarchtiff< 4.0.3-10ubuntu0.1UNKNOWN
ubuntu15.04noarchtiff< 4.0.3-12.3ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	tiff	< 3.9.2-2ubuntu0.15	UNKNOWN
ubuntu	12.04	noarch	tiff	< 3.9.5-2ubuntu1.7	UNKNOWN
ubuntu	14.04	noarch	tiff	< 4.0.3-7ubuntu0.2	UNKNOWN
ubuntu	14.10	noarch	tiff	< 4.0.3-10ubuntu0.1	UNKNOWN
ubuntu	15.04	noarch	tiff	< 4.0.3-12.3ubuntu1	UNKNOWN