Vulnetix
Try Vulnetix Request Demo
CVE-2018-16335 PUBLISHED

newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a different vulnerability than CVE-2018-15209.

EPSS 1.82% · 82.8th percentile

Risk Scores

EPSS Score
1.82%
82.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTStiff0, 4.0.9-4, 4.0.9-3
Ubuntu:16.04:LTStiff0, 4.0.3-12.3ubuntu2, 4.0.5-1
Ubuntu:14.04:LTStiff4.0.3-7ubuntu0.1, 4.0.3-7, 4.0.3-6ubuntu1

Timeline

References

Open in Interactive Console →