CVE-2016-10095 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Tiff

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-121 — Stack-based Buffer Overflow9 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.6%
top 31.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian TiffLibtiff
Timeline
PublishedMar 1
Latest updateMay 13

Description

Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDlibtiff/libtiff4.0.7
▶debiandebian/tiff< tiff 4.0.8-2 (bookworm)

🔴Vulnerability Details

2
GHSA
GHSA-r834-wg3m-jhqm: Stack-based buffer overflow in the _TIFFVGetField function in tif_dir↗2022-05-13
▶
OSV
CVE-2016-10095: Stack-based buffer overflow in the _TIFFVGetField function in tif_dir↗2017-03-01
▶

📋Vendor Advisories

2
Red Hat
libtiff: Stack-based buffer overflow in _TIFFVGetField↗2016-12-04
▶
Debian
CVE-2016-10095: tiff - Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTI...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 mingw-libtiff: various flaws [epel-7]↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 mingw-libtiff: various flaws [fedora-all]↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 libtiff: various flaws [fedora-all]↗2017-01-04
▶