CVE-2016-5319 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Libtiff

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-122 — Heap-based Buffer Overflow9 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.9%
top 24.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian TiffLibtiff
Timeline
PublishedJan 20
Latest updateMay 17

Description

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDlibtiff/libtiff4.0.6
▶debiandebian/tiff< tiff 4.0.6-3 (bookworm)

🔴Vulnerability Details

2
GHSA
GHSA-qxv5-8384-wvg6: Heap-based buffer overflow in tif_packbits↗2022-05-17
▶
OSV
CVE-2016-5319: Heap-based buffer overflow in tif_packbits↗2017-01-20
▶

📋Vendor Advisories

2
Red Hat
libtiff: Heap-based buffer overflow in bmp2tiff↗2016-04-27
▶
Debian
CVE-2016-5319: tiff - Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-5318 CVE-2016-5319 mingw-libtiff: various flaws [fedora-all]↗2016-06-08
▶
Bugzilla
CVE-2016-5318 CVE-2016-5319 libtiff: various flaws [fedora-all]↗2016-06-08
▶
Bugzilla
CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff↗2016-06-08
▶
Bugzilla
CVE-2016-5318 CVE-2016-5319 mingw-libtiff: various flaws [epel-7]↗2016-06-08
▶