CVE-2015-8783 — Out-of-bounds Read in Libtiff

CWE-125 — Out-of-bounds ReadCWE-787 — Out-of-bounds Write8 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.7%
top 28.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LibtiffDebian TiffDebian Linux
Timeline
PublishedFeb 1
Latest updateMay 13

Description

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDlibtiff/libtiff< 4.0.7
▶debiandebian/tiff< tiff 4.0.6-1 (bookworm)

Also affects: Debian Linux 7.0, 8.0

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2q6m-gwhg-jf2m: tif_luv↗2022-05-13
▶
OSV
CVE-2015-8783: tif_luv↗2016-02-01
▶

📋Vendor Advisories

3
Ubuntu
LibTIFF vulnerabilities↗2016-03-23
▶
Red Hat
libtiff: invalid assertion↗2016-01-24
▶
Debian
CVE-2015-8783: tiff - tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bound...↗2015
▶

💬Community

2
Bugzilla
CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion↗2016-01-25
▶
Bugzilla
CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: out-of-bounds writes for invalid images [fedora-all]↗2016-01-25
▶