Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6134
HistoryApr 18, 2018 - 3:44 a.m.

Denial Of Service (DoS) Via Out-of-bounds(OOB) Read

2018-04-1803:44:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.006

Percentile

77.9%

libtiff.so is vulnerable to denial of service(DoS) attacks. The LZW encoding in tif_lzw.c allows to input a malicious bmp image with parameter: -c lzw, leading to an out-of-bounds read.