NULL pointer dereference in LibTIFF - CVE-2018-19210
Published: December 11, 2018
Vulnerability identifier: #VU16444
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-19210
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition.
The vulnerability exists due to insufficient validation of user-supplied input processed by the TIFFWriteDirectorySec function, as defined in the tif_dirwrite.c source code file. A remote attacker can trick the victim into opening or executing a file that submits malicious input, trigger a NULL pointer dereference and cause the service to crash.
Affected software
LibTIFF
Gentoo Linux
Slackware Linux
Opensuse
Fedora
tiff (Debian package)
libtiff
Gentoo Linux
Slackware Linux
Opensuse
Fedora
tiff (Debian package)
libtiff
How to mitigate CVE-2018-19210
Cybersecurity Help is currently unaware of any official solutions to address the vulnerability.
tiff (Debian package) - update to 4.0.8-2+deb9u5
libtiff - addressed in versions 4.0.10-5.fc29, 4.0.10-5.fc30
libtiff - addressed in versions 4.0.10-5.fc29, 4.0.10-5.fc30