Denial of service in LibTIFF



Published: 2018-06-15
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2018-10801
CWE-ID CWE-401
CWE-400
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
Subscribe 		LibTIFF
Universal components / Libraries / Libraries used by multiple products

Vendor LibTIFF

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Resource exhaustion

EUVDB-ID: #VU13364

Risk: Low

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C]

CVE-ID: CVE-2018-10801

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to insufficient validation of user-supplied input processed by the TIFFClientOpen function, as defined in the tif_unix.c source code file. A remote attacker can use the .bmp2tiff command to execute a file that submits malicious input to the system, trigger memory leaks and cause the affected software to crash, resulting in a DoS condition.

Mitigation

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

Vulnerable software versions

LibTIFF: 3.8.2

External links

http://bugzilla.maptools.org/show_bug.cgi?id=2790


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###