Input validation error in LibTIFF - CVE-2018-10963

Vulnerability identifier: #VU13373

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10963

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause denial of service conditions.

The vulnerability exists due to insufficient validation of user-supplied input processed by the TIFFWriteDirectorySec() function, as defined in the tif_dirwrite.c source code file. A remote attacker can trick the victim into opening a specially crafted file, trigger assertion failure and cause the application to crash.

LibTIFF
Arch Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Slackware Linux
Opensuse
Fedora
tiff (Alpine package)
openSUSE Leap
libtiff
Data Computing Appliance (DCA)

Install update from vendor's website.

tiff (Alpine package) - addressed in versions 4.0.9-r5, 4.0.9-r6
libtiff - addressed in versions 4.0.9-9.fc27, 4.0.9-9.fc28
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://gitlab.com/libtiff/libtiff/commit/de144fd228e4be8aa484c3caf3d814b6fa88c6d9

• Denial of service in LibTIFF
• OpenSUSE Linux update for tiff
• OpenSUSE Linux update for tiff
• Slackware Linux update for libtiff
• Arch Linux update for lib32-libtiff
• Debian update for tiff
• Red Hat update for libtiff
• Amazon Linux AMI update for libtiff
• Input validation error in tiff (Alpine package)
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Fedora 27 update for libtiff
• Fedora 28 update for libtiff