Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade compat-libtiff3Upgrade libtiff | Mar 7, 2017 | Dec 6, 2016 |
| Centos_linux | — | Upgrade libtiffUpgrade libtiff-develUpgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade libtiff-tools | Feb 1, 2017 | Dec 6, 2016 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Dec 6, 2016 |
| Freebsd | — | Upgrade linux-c6-tiffUpgrade tiffUpgrade linux-c7-tiffUpgrade linux-c7-libtiffUpgrade linux-c6-libtiff | Feb 7, 2017 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtiffUpgrade libtiff-devel | Nov 30, 2017 | Dec 6, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtiffUpgrade libtiff-devel | Nov 30, 2017 | Dec 6, 2016 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 4.0.8-0.175.3.27.0.1.0 on Solaris 11.3 | Dec 19, 2017 | Dec 6, 2016 |
| Oracle_linux | — | Upgrade libtiffUpgrade libtiff-staticUpgrade libtiff-toolsUpgrade libtiff-devel | Feb 2, 2017 | Jan 28, 2015 |
| Redhat_linux | — | Upgrade libtiff-toolsNo solution existsUpgrade libtiff-staticUpgrade libtiffUpgrade libtiff-debuginfoUpgrade libtiff-devel | Feb 3, 2017 | Dec 6, 2016 |
| Suse | — | Upgrade libtiff3-32bitUpgrade libtiff3Upgrade tiffUpgrade libtiff-devel-32bitUpgrade libtiff3-x86Upgrade libtiff-devel | Nov 24, 2018 | Dec 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub