Home

CVE-2018-19210

Description

In LibTIFF 4.0.9, there is a null pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
4.911

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3Windows
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.6-1ubuntu0.6_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.6-1ubuntu0.6_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.9-5ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.9-5ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.9-6ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.9-6ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.3-7ubuntu0.11_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff5_4.0.3-7ubuntu0.11_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.6-1ubuntu0.6_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.6-1ubuntu0.6_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.9-5ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.9-5ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.9-6ubuntu0.2_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.9-6ubuntu0.2_amd64.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.3-7ubuntu0.11_i386.debLinux
Tag Image File Format (TIFF) library (USN-3906-1) libtiff-tools_4.0.3-7ubuntu0.11_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234