CVE-2018-17000 PUBLISHED

A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.

EPSS 1.21% · 78.9th percentile

Risk Scores

EPSS Score
1.21%
78.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTStiff0, 4.0.6-1ubuntu0.5, 4.0.6-1ubuntu0.4
Ubuntu:18.04:LTStiff4.0.9-5ubuntu0.1, 0, 4.0.8-5
Ubuntu:14.04:LTStiff4.0.3-7, 4.0.3-6ubuntu1, 4.0.3-6

Timeline

References

Open in Interactive Console →