CVE-2017-7592

EPSS 0.35%
Published 09.04.2017 14:59:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Libtiff ≫ Libtiff Version4.0.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.35%	0.568

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.debian.org/security/2017/dsa-3844

https://security.gentoo.org/glsa/201709-27

https://usn.ubuntu.com/3602-1/

http://bugzilla.maptools.org/show_bug.cgi?id=2658

Issue Tracking

http://www.securityfocus.com/bid/97510

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-7592

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-7592

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-7592

EUVD