PT-2016-7772 · Libtiff+1 · Libtiff+1

Axel Souchet · Publicado 2016-11-22 · Atualizado 2024-06-15 · CVE-2016-9538

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6

Description The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.

Recommendations For libtiff version 4.0.6, consider updating to a newer version that addresses this issue, as the current version is affected by the integer overflow in the readContigStripsIntoBuffer() function.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-9538

DLA-795-1

DSA-3762-1

OPENSUSE-SU-2024:11461-1

USN-3212-1

USN-3212-2

Produtos afetados

Ubuntu

Libtiff

Referências · 104

• https://github.com/vadz/libtiff/commit/43c0b81a818640429317c80fea1e66771e85024b#diff-c8b4b355f9b5c06d585b23138e1c185f · Correção
• https://suse.com/security/cve/CVE-2016-5318 · Nota
• https://ubuntu.com/security/CVE-2016-3623 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-18013 · Nota
• https://suse.com/security/cve/CVE-2017-11613 · Nota
• https://suse.com/security/cve/CVE-2018-8905 · Nota
• https://suse.com/security/cve/CVE-2016-10371 · Nota
• https://suse.com/security/cve/CVE-2019-7663 · Nota
• https://ubuntu.com/security/CVE-2016-9538 · Aviso do Fabricante
• https://launchpad.net/bugs/1670036 · Nota
• https://ubuntu.com/security/CVE-2016-9297 · Aviso do Fabricante
• http://securityfocus.com/bid/94484 · Nota
• https://suse.com/security/cve/CVE-2017-7594 · Nota
• https://ubuntu.com/security/CVE-2016-9532 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-3622 · Aviso do Fabricante