QwikSec

Security Database

CVE

CWE

Training

CVE-2018-5784

Published: Jan 19, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_UBUNTU

[debian-lts-announce] 20180531 [SECURITY] [DLA 1391-1] tiff security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

http://bugzilla.maptools.org/show_bug.cgi?id=2772

x_refsource_MISC

[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update

mailing-list

x_refsource_MLIST

https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6ef

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.