SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

LibTIFF - (bulletinjan2018)

ID: oval:org.secpod.oval:def:2101659	Date: (C)2019-12-31 (M)2022-10-10
Class: PATCH	Family: unix

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.

Platform:

Sun Solaris 11

Product:

image/library/libtiff

Reference:

bulletinjan2018

CVE-2017-13726


30479



423868



248038



909



194772



282