The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | May 30, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtiffUpgrade libtiff-devel | Dec 4, 2019 | May 10, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libtiffUpgrade libtiff-devel | Nov 19, 2019 | May 10, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libtiffUpgrade libtiff-devel | Nov 19, 2019 | May 10, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2016 |
| Suse | — | Upgrade libtiff-develUpgrade libtiff5-32bitUpgrade tiffUpgrade libtiff5 | Sep 26, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade libtiff5Upgrade libtiff-tools | Apr 25, 2018 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub