Out-of-bounds read in LibTIFF - CVE-2018-17101

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU15532

Out-of-bounds read in LibTIFF - CVE-2018-17101

Published: October 25, 2018


Vulnerability identifier: #VU15532
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17101
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to out-of-bounds read during insufficient validation of user-supplied input processed by the cpTags function, as defined in the tools/tiff2bw.c and tools/pal2rgb.c source code files. A remote unauthenticated attacker can trick the victim into opening or executing an image file that submits malicious input to the targeted system. A successful exploit could trigger memory corruption and cause the affected software to crash, resulting in a DoS condition.


Affected software

LibTIFF
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Opensuse
Fedora
tiff (Alpine package)
libtiff
Dynamic System Analysis (DSA) Preboot
Data Computing Appliance (DCA)

How to mitigate CVE-2018-17101

Install update from vendor's website.

tiff (Alpine package) - update to 4.0.9-r6
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
libtiff - addressed in versions 4.0.9-13.fc28, 4.0.9-13.fc29
Data Computing Appliance (DCA) - update to 4.3.0.0

External References

Related Security Bulletins