LibTIFF CVE-2018-17101 Function Multiple Denial of Service Vulnerabilities

Bugtraq ID:	105370
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-17101
Remote:	Yes
Local:	No
Published:	Sep 16 2018 12:00AM
Updated:	Sep 16 2018 12:00AM
Credit:	yangx92
Vulnerable:	LibTIFF LibTIFF 4.0.9
Not Vulnerable:

LibTIFF CVE-2018-17101 Function Multiple Denial of Service Vulnerabilities

LibTIFF is prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to cause denial-of-service conditions, denying service to legitimate users.

LibTIFF 4.0.9 is vulnerable; other versions may also be vulnerable.

LibTIFF CVE-2018-17101 Function Multiple Denial of Service Vulnerabilities

References:

• fix three potential vulnerabilities (LibTiff)
  
• LibTIFF Homepage (LibTIFF)
  
• Bug 2807 - Out-of-bounds Write in the tiff2bw and pal2rgb tools (Maptools)