PT-2016-7772 · Libtiff+1 · Libtiff+1

Axel Souchet · Published 2016-11-22 · Updated 2024-06-15 · CVE-2016-9538

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6

Description The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.

Recommendations For libtiff version 4.0.6, consider updating to a newer version that addresses this issue, as the current version is affected by the integer overflow in the readContigStripsIntoBuffer() function.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-9538

DLA-795-1

DSA-3762-1

OPENSUSE-SU-2024:11461-1

USN-3212-1

USN-3212-2

Affected Products

Ubuntu

Libtiff

References · 104

• https://github.com/vadz/libtiff/commit/43c0b81a818640429317c80fea1e66771e85024b#diff-c8b4b355f9b5c06d585b23138e1c185f · Patch
• https://ubuntu.com/security/CVE-2016-3623 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9532 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9533 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5315 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3212-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9534 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-9538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9540 · Vendor Advisory