CVE-2018-19210

4.3

MEDIUMCVSS v2

Published

November 12, 2018

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 4.0.9NVD

rzkn/libtiff

GitLab

= 4.0.9NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= 4.0.9NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 4.0.9NVD

Security Advisories

CVE-2018-19210

Description

More on this CVE