CVE-2018-8905 — Out-of-bounds Write in Tiff

CWE-787 — Out-of-bounds WriteCWE-122 — Heap-based Buffer OverflowCWE-125 — Out-of-bounds Read12 documents7 sources
Severity
8.8HIGHNVD
EPSS
0.6%
top 29.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Debian TiffCanonical Ubuntu LinuxDebian Linux+4 more
Timeline
PublishedMar 22
Latest updateMay 13

Description

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages5 packages

▶NVDlibtiff/libtiff4.0.9
▶debiandebian/tiff< tiff 4.0.9-6 (bookworm)

Also affects: Debian Linux 7.0, 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 18.04, 18.10

Patches

Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hjgx-w465-2m2j: In LibTIFF 4↗2022-05-13
▶
OSV
CVE-2018-8905: In LibTIFF 4↗2018-03-22
▶

📋Vendor Advisories

4
Red Hat
file: stack-based buffer over-read in do_core_note in readelf.c↗2019-02-18
▶
Ubuntu
LibTIFF vulnerabilities↗2019-01-22
▶
Red Hat
libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service↗2018-03-17
▶
Debian
CVE-2018-8905: tiff - In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeC...↗2018
▶

💬Community

5
Bugzilla
CVE-2019-8905 file: stack-based buffer over-read in do_core_note in readelf.c↗2019-02-20
▶
Bugzilla
CVE-2018-8905 mingw-libtiff: libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service [epel-7]↗2018-03-23
▶
Bugzilla
CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service [fedora-all]↗2018-03-23
▶
Bugzilla
CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service↗2018-03-23
▶
Bugzilla
CVE-2018-8905 mingw-libtiff: libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service [fedora-all]↗2018-03-23
▶
CVE-2018-8905 — Out-of-bounds Write in Debian Tiff | cvebase