CVE-2018-15209 PUBLISHED

ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf.

EPSS 0.63% · 70.1th percentile

Risk Scores

EPSS Score
0.63%
70.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTStiff0, 4.0.6-1ubuntu0.3, 4.0.6-1ubuntu0.2
Ubuntu:18.04:LTStiff4.0.9-4, 0, 4.0.8-5
Ubuntu:14.04:LTStiff4.0.3-7ubuntu0.1, 4.0.3-7, 4.0.3-6ubuntu1

Timeline

References

Open in Interactive Console →