The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | May 30, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtiff-develUpgrade libtiff | Dec 4, 2019 | May 10, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libtiff-develUpgrade libtiff | Nov 19, 2019 | May 10, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libtiff-develUpgrade libtiff | Nov 19, 2019 | May 10, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2016 |
| Suse | — | Upgrade libtiff-develUpgrade libtiff5-32bitUpgrade libtiff5Upgrade tiff | Sep 26, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade libtiff-toolsUpgrade libtiff5 | Apr 25, 2018 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub