Ubuntu.comUB:CVE-2017-9815CVE-2017-9815
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
68.1%
In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in
libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers
to cause a denial of service (memory leak within the function _TIFFmalloc
in tif_unix.c) via a crafted file.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | If this actually leaks only the 8 bytes shown in the bug then this cve should be rejected. I’m marking it ‘low’ rather than ‘negligible’ just so that we eventually return to the bug and see the results. |
| mdeslaur | same commit as CVE-2017-9403 this will not be fixed in precise/esm |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
68.1%