Improper input validation in Libtiff
CVE-2017-11613
In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.027 (85.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 85.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: -0.000
Affected products
- Libtiff — versions 4.0.8
Weakness classification (CWE)
References
- www.securityfocus.com/bid/99977 (VDB Entry, Third Party Advisory, vdb-entry)
- usn.ubuntu.com/3606-1/ (vendor-advisory)
- gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f (Third Party Advisory)
- lists.debian.org/debian-lts-announce/2018/05/msg00022.html (mailing-list)
- www.debian.org/security/2018/dsa-4349 (vendor-advisory)
- lists.debian.org/debian-lts-announce/2018/07/msg00002.html (mailing-list)
Frequently asked questions
- What is CVE-2017-11613?
- CVE-2017-11613 is a medium-severity vulnerability in Libtiff, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2017-07-26.
- How severe is CVE-2017-11613?
- Medium severity. CVSS v3 base score is 6.5 out of 10.