In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.
References
Link | Resource |
---|---|
http://bugzilla.maptools.org/show_bug.cgi?id=2780 | Exploit Issue Tracking Third Party Advisory |
https://access.redhat.com/errata/RHSA-2019:2053 | Third Party Advisory |
https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow | Exploit Third Party Advisory |
https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d | Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3864-1/ | Third Party Advisory |
https://www.debian.org/security/2018/dsa-4349 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
01 Mar 2023, 17:13
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |
|
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:2053 - Third Party Advisory |
Information
Published : 2018-03-22 04:29
Updated : 2024-02-04 19:46
NVD link : CVE-2018-8905
Mitre link : CVE-2018-8905
CVE.ORG link : CVE-2018-8905
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_workstation
- enterprise_linux_desktop
canonical
- ubuntu_linux
libtiff
- libtiff
debian
- debian_linux
CWE
CWE-787
Out-of-bounds Write