LibTIFF CVE-2014-8128 Out of Bounds Write Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	72326
Class:	Design Error
CVE:	CVE-2014-8128
Remote:	Yes
Local:	No
Published:	Jan 24 2015 12:00AM
Updated:	Jul 15 2015 12:13AM
Credit:	William Robinet and american fuzzy lop
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

LibTIFF CVE-2014-8128 Out of Bounds Write Multiple Remote Denial of Service Vulnerabilities

LibTIFF is prone to multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to cause the application to crash, denying service to legitimate users.

LibTIFF CVE-2014-8128 Out of Bounds Write Multiple Remote Denial of Service Vulnerabilities

Attackers can use standard, readily available tools to exploit these issues.

LibTIFF CVE-2014-8128 Out of Bounds Write Multiple Remote Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

LibTIFF CVE-2014-8128 Out of Bounds Write Multiple Remote Denial of Service Vulnerabilities

References:

• LibTIFF Homepage (LibTIFF)