PT-2019-6173 · Libtiff+3 · Libtiff+3
Published
2019-04-28
·
Updated
2021-11-30
·
CVE-2020-19143
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LibTiff version 4.0.10
Description
The issue is related to a buffer overflow in the
TIFFVGetField function in the libtiff/tif dir.c component, allowing attackers to cause a denial of service. This can be exploited by a remote attacker.Recommendations
For LibTiff version 4.0.10, consider disabling the
TIFFVGetField function as a temporary workaround until a patch is available. Restrict access to the libtiff/tif dir.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Libtiff
Linuxmint
Ubuntu