Lucene search
Veracode Vulnerability DatabaseVERACODE:6456HistoryJun 01, 2018 - 4:46 a.m.
Denial Of Service (DoS) During TIFFOpen Process
2018-06-0104:46:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.009 Low
EPSS
Percentile
82.3%
libtiff.so is vulnerable to denial of service (DoS). When the attacker can send a malicious input file, td_imagelength is directly derived from the input file length. Moreover, TIFFOpen function does not check td_imagelength during TIFFOpen process, allowing the attacker to trigger out-of-memory (OOM).
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff.so | le | 3.9.7 | |
| libtiff | le | 4.0.6.2 |
Related
debiancve
debiancve
CVE-2017-11613
2017-07-26 08:29:00
alpinelinux
alpinelinux
CVE-2017-11613
2017-07-26 08:29:00
osv
osv
CVE-2017-11613
2017-07-26 08:29:00
tiff - security update
2018-05-31 00:00:00
tiff - security update
2018-07-02 00:00:00
cvelist
cvelist
CVE-2017-11613
2017-07-26 08:00:00
nessus
nessus
Fedora 27 : libtiff (2018-9e0a37e7a2)
2018-06-18 00:00:00
Fedora 28 : libtiff (2018-35d435f362)
2019-01-03 00:00:00
Debian DLA-1391-1 : tiff security update
2018-06-05 00:00:00
ubuntucve
ubuntucve
nvd
nvd
CVE-2017-11613
2017-07-26 08:29:00
cve
cve
CVE-2017-11613
2017-07-26 08:29:00
redhatcve
redhatcve
CVE-2017-11613
2017-07-26 21:18:25
prion
prion
Input validation
2017-07-26 08:29:00
openvas
openvas
Debian: Security Advisory (DLA-1391-1)
2018-06-03 00:00:00
Mageia: Security Advisory (MGASA-2018-0180)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:1889-1)
2021-06-09 00:00:00
mageia
mageia
Updated libtiff packages fix security vulnerabilities
2018-03-19 15:13:14
debian
debian
[SECURITY] [DLA 1391-1] tiff security update
2018-05-31 23:22:40
[SECURITY] [DLA 1411-1] tiff security update
2018-07-02 14:49:43
[SECURITY] [DSA 4349-1] tiff security update
2018-11-30 22:41:54
archlinux
archlinux
[ASA-201811-17] libtiff: multiple issues
2018-11-20 00:00:00
[ASA-201811-18] lib32-libtiff: multiple issues
2018-11-20 00:00:00
suse
suse
Security update for tiff (moderate)
2018-07-14 00:09:06
Security update for tiff (moderate)
2018-10-24 15:10:10
Security update for tiff (moderate)
2018-06-28 15:08:17
fedora
fedora
[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28
2018-06-15 15:52:15
[SECURITY] Fedora 27 Update: libtiff-4.0.9-10.fc27
2018-06-15 14:58:59
[SECURITY] Fedora 28 Update: libtiff-4.0.9-13.fc28
2018-10-19 16:09:18
cloudfoundry
cloudfoundry
USN-3606-1: LibTIFF vulnerabilities | Cloud Foundry
2018-05-02 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2018-03-26 00:00:00
photon
photon
ibm
ibm
Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS
2022-06-03 14:32:29
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libTIFF
2023-12-07 22:45:03
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01