CVE-2018-5784
- State
- Published
- Severity
- Not scored
- Published
- Jan 19, 2018
- Updated
- Aug 5, 2024
- Reserved
- Jan 19, 2018
Description
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3606-1vendor-advisory
- USN-3602-1vendor-advisory
- [debian-lts-announce] 20180531 [SECURITY] [DLA 1391-1] tiff security updatemailing-list
- DSA-4349vendor-advisory
- http://bugzilla.maptools.org/show_bug.cgi?id=2772
- [debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security updatemailing-list
- https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6ef
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.