PT-2016-3810 · Libtiff+4 · Libtiff+4

Hans Jerry Illikainen · Publicado 2016-01-08 · Atualizado 2024-06-15 · CVE-2015-7554

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6

Description The issue allows attackers to cause a denial of service, which may result in an invalid memory write and crash, or possibly have other unspecified impacts. This can be achieved through crafted field data in an extension tag in a TIFF image. The TIFFVGetField function in tif dir.c is the vulnerable component.

Recommendations For libtiff version 4.0.6, consider updating to a newer version that addresses this issue, as the current version allows for potential denial of service or other unspecified impacts through the TIFFVGetField function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CESA-2016_1546

CESA-2016_1547

CVE-2015-7554

DLA-692-1

DLA-693-1

MGASA-2016-0349

OPENSUSE-SU-2016_3035-1

OPENSUSE-SU-2018_0097-1

OPENSUSE-SU-2024:10554-1

RHSA-2016:1546

RHSA-2016:1547

RHSA-2016_1546

RHSA-2016_1547

SUSE-SU-2016:0160-1

SUSE-SU-2016:0353-1

SUSE-SU-2016_0160-1

SUSE-SU-2016_0353-1

SUSE-SU-2018:0073-1

SUSE-SU-2018:1179-1

SUSE-SU-2018:1835-1

SUSE-SU-2018_1179-1

USN-3212-1

USN-3212-2

USN-3212-3

Produtos afetados

Centos

Red Hat

Suse

Ubuntu

Libtiff

Referências · 354

• 🔥 http://seclists.org/fulldisclosure/2015/Dec/119 · Exploit
• 🔥 http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html · Exploit
• 🔥 http://openwall.com/lists/oss-security/2015/12/26/7 · Exploit
• https://github.com/vadz/libtiff/commit/c7153361a4041260719b340f73f2f76 · Nota
• https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-5be5ce02d0dea67050d5b2a10102d1ba · Nota
• https://lists.centos.org/pipermail/centos-announce/2016-August/058929.html · Nota
• https://suse.com/security/cve/CVE-2013-1960 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20160353-1 · Nota
• http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-3945.html · Nota
• https://access.redhat.com/security/cve/CVE-2014-9655 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0073-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1010163 · Nota
• http://bugzilla.maptools.org/show_bug.cgi?id=2592 · Nota
• https://lists.centos.org/pipermail/centos-announce/2016-August/084161.html · Nota