PT-2018-3508

CVE-2018-10779

·

Published

2018-05-04

·

Updated

2024-06-15

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: LibTIFF version 3.8.2
Description: The issue is related to a heap-based buffer over-read in the TIFFWriteScanline function. This could potentially allow a remote attacker to cause a denial of service.
Recommendations: For LibTIFF version 3.8.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2018-10779
BDU:2020-03212
CESA-2019_2053
MGASA-2018-0409
OPENSUSE-SU-2018_2880-1
OPENSUSE-SU-2018_3370-1
OPENSUSE-SU-2024:11461-1
RHSA-2019:2053
RHSA-2019_2053
SUSE-SU-2018:2676-1
SUSE-SU-2018:2836-1
SUSE-SU-2018:3327-1
SUSE-SU-2018_3327-1
USN-3906-1
USN-3906-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com