Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44479
HistoryNov 29, 2023 - 1:16 p.m.

Denial Of Service

2023-11-2913:16:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
libtiff vulnerability
tiffcp utility
heap overflow

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

libtiff.so is vulnerable to Denial Of Service attack. The vulnerability is due to a lack of codec validation in the tiffcp utility. A heap based buffer overflow is caused while processing a crafted TIFF file, leading to Denial of Service (DoS).

CPENameOperatorVersion
libtiff.sole5.4.0
libtiff.sole5.4.0