CVE-2017-12944

EPSS 0.74%
Published 18.08.2017 15:29:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Libtiff ≫ Libtiff Version4.0.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.74%	0.72

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://usn.ubuntu.com/3606-1/

https://usn.ubuntu.com/3602-1/

https://www.debian.org/security/2018/dsa-4100

http://bugzilla.maptools.org/show_bug.cgi?id=2725

Third Party Advisory

VDB Entry

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-12944

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-12944

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-12944

EUVD