logo
DATABASE RESOURCES PRICING ABOUT US

Denial Of Service (DoS)

Description

libtiff.so is vulnerable to denial of service. The vulnerability exists in `tiffcrop.c` due to improper input validation leading to out of bounds reads and writes which allows an attacker to send crated tiff files causing an application crash.


Affected Software


CPE Name Name Version
libtiff.so 4.3.6
libtiff.so 3.5.debug
tiff:3.14 4.2.0-r1
tiff:3.14 4.3.0-r0
tiff:3.15 4.3.0-r1
tiff:3.15 4.3.0-r0
tiff:3.16 4.3.0-r1
tiff:3.13 4.1.0-r2
tiff:3.13 4.2.0-r0
tiff:3.13 4.3.0-r0
tiff:edge 4.3.0-r1
tiff:edge 4.2.0-r0
tiff:edge 4.2.0-r1
tiff:edge 4.3.0-r0
tiff:edge 4.1.0-r0
libtiff.so 4.3.6
libtiff.so 3.5.debug
tiff:3.14 4.2.0-r1
tiff:3.14 4.3.0-r0
tiff:3.15 4.3.0-r1
tiff:3.15 4.3.0-r0
tiff:3.16 4.3.0-r1
tiff:3.13 4.1.0-r2
tiff:3.13 4.2.0-r0
tiff:3.13 4.3.0-r0
tiff:edge 4.3.0-r1
tiff:edge 4.2.0-r0
tiff:edge 4.2.0-r1
tiff:edge 4.3.0-r0
tiff:edge 4.1.0-r0

Related