PT-2016-7492 · None+2 · Libtiff+2

Published 2016-10-28 · Updated 2022-04-19 · CVE-2016-8331

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.6

Description A remote code execution issue exists in the handling of TIFF images. This is due to a type confusion vulnerability that can be triggered by a crafted TIFF document, potentially allowing remote code execution. The vulnerability can be exploited via a TIFF file delivered to the application using LibTIFF's tag extension functionality.

Recommendations For LibTIFF version 4.0.6, consider avoiding the use of TIFF files or restricting access to the tag extension functionality until a patch is available. As a temporary workaround, disabling the handling of TIFF images may help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2016-8331

DLA-693-1

OPENSUSE-SU-2018_1834-1

SUSE-SU-2018:1826-1

SUSE-SU-2018:1835-1

USN-3212-1

USN-3212-2

USN-3212-3

Affected Products

Libtiff

Suse

Ubuntu

References · 171

• 🔥 https://github.com/xiaoqx/pocs/tree/master/libtiff · Exploit
• 🔥 http://talosintelligence.com/reports/TALOS-2016-0190 · Exploit
• 🔥 https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9538 · Security Note
• https://bdu.fstec.ru/vul/2019-01071 · Security Note
• https://bdu.fstec.ru/vul/2017-00883 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-8331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6223 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5323 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-8331 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3658 · Security Note
• https://ubuntu.com/security/CVE-2016-5875 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3991 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3990 · Security Note
• https://ubuntu.com/security/CVE-2016-5316 · Vendor Advisory