PT-2019-6173 · Libtiff+3 · Libtiff+3
Publicado
2019-04-28
·
Atualizado
2021-11-30
·
CVE-2020-19143
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LibTiff version 4.0.10
Description
The issue is related to a buffer overflow in the
TIFFVGetField function in the libtiff/tif dir.c component, allowing attackers to cause a denial of service. This can be exploited by a remote attacker.Recommendations
For LibTiff version 4.0.10, consider disabling the
TIFFVGetField function as a temporary workaround until a patch is available. Restrict access to the libtiff/tif dir.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Libtiff
Linuxmint
Ubuntu