VDB
ALPINE-CVE-2016-5317
ALPINE-CVE-2016-5317
PUBLISHED
CVSS 6.5 MEDIUM
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
Risk Scores
CVSS v3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.3 | tiff | 4.0.6-r1, 4.0.6-r4, 4.0.6-r3 |
| Alpine:v3.4 | tiff | 4.0.6-r4, 4.0.3-r2, 4.0.3-r3 |
| Alpine:v3.2 | tiff | 4.0.6-r2, 4.0.6-r1, 4.0.6-r0 |
Timeline
- Jan 20, 2017 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch