CVE-2018-5784

2018-01-1900:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.01

Percentile

83.5%

JSON

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the
TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage
this vulnerability to cause a denial of service via a crafted tif file.
This occurs because the declared number of directory entries is not
validated against the actual number of directory entries.

Bugs

Notes

Author	Note
mdeslaur	we will not be fixing this issue in precise/esm

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchtiff< 4.0.8-5ubuntu0.1UNKNOWN
ubuntu14.04noarchtiff< 4.0.3-7ubuntu0.8UNKNOWN
ubuntu16.04noarchtiff< 4.0.6-1ubuntu0.3UNKNOWN