Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade compat-libtiff3Upgrade libtiff | Mar 7, 2017 | Dec 6, 2016 |
| Centos_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-staticUpgrade libtiff-toolsUpgrade libtiff-debuginfo | Feb 1, 2017 | Dec 6, 2016 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Dec 6, 2016 |
| Freebsd | — | Upgrade tiffUpgrade linux-c6-tiffUpgrade linux-c6-libtiffUpgrade linux-c7-tiffUpgrade linux-c7-libtiff | Feb 7, 2017 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtiff-develUpgrade libtiff | Nov 30, 2017 | Dec 6, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtiffUpgrade libtiff-devel | Nov 30, 2017 | Dec 6, 2016 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 4.0.8-0.175.3.27.0.1.0 on Solaris 11.3 | Dec 19, 2017 | Dec 6, 2016 |
| Oracle_linux | — | Upgrade libtiffUpgrade libtiff-staticUpgrade libtiff-develUpgrade libtiff-tools | Feb 2, 2017 | Jan 28, 2015 |
| Redhat_linux | — | Upgrade libtiff-develUpgrade libtiff-debuginfoUpgrade libtiffUpgrade libtiff-staticNo solution existsUpgrade libtiff-tools | Feb 3, 2017 | Dec 6, 2016 |
| Suse | — | Upgrade tiffUpgrade libtiff3-32bitUpgrade libtiff3Upgrade libtiff-devel-32bitUpgrade libtiff-develUpgrade libtiff3-x86 | Nov 24, 2018 | Dec 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub