CVE-2018-8905

🗓️ 22 Mar 2018 00:00:00Reported by ubuntu.comType

Heap-Buffer overflow in LibTIFF 4.0.9 via crafted TIFF file

Reporter	Title	Published	Views	Family All 102
OSV	tiff3 - security update	13 May 201800:00	–	osv
OSV	tiff - security update	13 May 201800:00	–	osv
OSV	CVE-2018-8905	22 Mar 201804:29	–	osv
OSV	tiff - security update	2 Jul 201800:00	–	osv
OSV	Red Hat Security Advisory: libtiff security update	16 Sep 202401:58	–	osv
OSV	tiff - security update	30 Nov 201800:00	–	osv
OSV	libtiff-devel-32bit-4.3.0-1.3 on GA media	15 Jun 202400:00	–	osv
Tenable Nessus	Debian DLA-1377-1 : tiff security update	14 May 201800:00	–	nessus
Tenable Nessus	Debian DLA-1378-1 : tiff3 security update	14 May 201800:00	–	nessus
Tenable Nessus	Photon OS 2.0 : libtiff (PhotonOS-PHSA-2018-2.0-0048) (deprecated)	24 Jul 201800:00	–	nessus

Source	Link
github	www.github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow
ubuntu	www.ubuntu.com/security/notices/USN-3864-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8905
launchpad	www.launchpad.net/bugs/cve/CVE-2018-8905
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-8905

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	tiff	4.0.9-5ubuntu0.1	UNKNOWN
ubuntu	14.04	noarch	tiff	4.0.3-7ubuntu0.10	UNKNOWN
ubuntu	16.04	noarch	tiff	4.0.6-1ubuntu0.5	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Mar 2018 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.8

EPSS0.003