CVE-2016-5318 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Tiff

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-121 — Stack-based Buffer Overflow11 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.8%
top 25.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian TiffLibtiff
Timeline
PublishedJan 20
Latest updateMay 14

Description

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDlibtiff/libtiff4.0.6
▶debiandebian/tiff< tiff 4.0.6-3 (bookworm)

🔴Vulnerability Details

2
GHSA
GHSA-hqx5-9h4v-xwm4: Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4↗2022-05-14
▶
OSV
CVE-2016-5318: Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4↗2017-01-20
▶

📋Vendor Advisories

3
Ubuntu
LibTIFF vulnerabilities↗2018-03-26
▶
Red Hat
libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function↗2016-04-27
▶
Debian
CVE-2016-5318: tiff - Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and ...↗2016
▶

💬Community

5
Bugzilla
CVE-2016-5318 CVE-2016-5319 mingw-libtiff: various flaws [fedora-all]↗2016-06-08
▶
Bugzilla
CVE-2016-5318 CVE-2016-5319 libtiff: various flaws [fedora-all]↗2016-06-08
▶
Bugzilla
CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function↗2016-06-08
▶
Bugzilla
CVE-2016-5318 CVE-2016-5319 mingw-libtiff: various flaws [epel-7]↗2016-06-08
▶
Bugzilla
CVE-2015-5318 jenkins: Public value used for CSRF protection salt (SECURITY-169)↗2015-11-16
▶