Null pointer dereference in LibTIFF - CVE-2018-18661

Vulnerability identifier: #VU15901

CSH Severity: Low

CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-18661

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. A remote attacker can trick the victim into opening a specially crafted input, trigger NULL pointer dereference and cause the service to crash.

LibTIFF
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Slackware Linux
Opensuse
Fedora
tiff (Alpine package)
libtiff
Dynamic System Analysis (DSA) Preboot
Data Computing Appliance (DCA)

Install update from vendor's website.

tiff (Alpine package) - update to 4.0.10-r0
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
libtiff - addressed in versions 4.0.10-1.fc27, 4.0.10-1.fc28, 4.0.10-1.fc29
Data Computing Appliance (DCA) - update to 4.3.0.0

• http://bugzilla.maptools.org/show_bug.cgi?id=2819

• Slackware Linux update for libtiff
• Arch Linux update for libtiff
• Arch Linux update for lib32-libtiff
• OpenSUSE Linux update for tiff
• OpenSUSE Linux update for tiff
• Red Hat update for libtiff
• Amazon Linux AMI update for libtiff
• Null pointer dereference in tiff (Alpine package)
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Fedora 29 update for libtiff
• Fedora 27 update for libtiff
• Fedora 28 update for libtiff