Su_Laus

**Name of the Vulnerable Software and Affected Versions** libtiff (affected versions not specified) **Description** An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to the "TIFFOpen()" API may allow a remote attacker to cause a denial of service via a crafted input with size smaller than 379 KB. The issue is related to uncontrolled resource consumption, which can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LibTIFF versions 4.5.0 and earlier **Description** The issue is related to a heap-based use after free in the `loadImage()` function, located in `tools/tiffcrop.c`, which can be triggered by a crafted TIFF image. This can potentially allow an attacker to cause a denial of service. **Recommendations** For LibTIFF versions 4.5.0 and earlier, consider updating to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.3.0 **Description** The issue is an Out-of-bounds Read error in the `tiffcrop` function of libtiff, allowing attackers to cause a denial-of-service via a crafted tiff file. **Recommendations** For version 4.3.0, the fix is available with commit 46dc8fcd for users that compile libtiff from sources.

**Name of the Vulnerable Software and Affected Versions** LibTIFF (affected versions not specified) **Description** A stack buffer overflow flaw was found in Libtiff's tiffcp.c in the `main()` function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.