CVE-2017-13727

4.3

MEDIUMCVSS v2

Published

August 29, 2017

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 4.0.8NVD

rzkn/libtiff

GitLab

= 4.0.8NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= 4.0.8NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 4.0.8NVD

Security Advisories

CVE-2017-13727

Description

More on this CVE