CVE-2016-3621

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-3621

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3621.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-3621

Related

Published

2016-10-03T16:09:02Z

Modified

2024-09-03T01:15:05.327419Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

References

Affected packages

Alpine:v3.2 / tiff

Package

Name: tiff
Purl: pkg:apk/alpine/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.7-r0

Affected versions

3.*

3.8.2-r0

3.8.2-r1

3.8.2-r2

3.8.2-r3

3.8.2-r4

3.9.5-r0

3.9.5-r1

4.*

4.0.1-r0

4.0.2-r0

4.0.2-r1

4.0.3-r0

4.0.3-r1

4.0.3-r2

4.0.3-r3

4.0.6-r0

4.0.6-r1

4.0.6-r2

Alpine:v3.3 / tiff

Package

Name: tiff
Purl: pkg:apk/alpine/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.7-r0

Affected versions

3.*

3.8.2-r0

3.8.2-r1

3.8.2-r2

3.8.2-r3

3.8.2-r4

3.9.5-r0

3.9.5-r1

4.*

4.0.1-r0

4.0.2-r0

4.0.2-r1

4.0.3-r0

4.0.3-r1

4.0.3-r2

4.0.3-r3

4.0.6-r0

4.0.6-r1

4.0.6-r3

4.0.6-r4

Alpine:v3.4 / tiff

Package

Name: tiff
Purl: pkg:apk/alpine/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.7-r0

Affected versions

3.*

3.8.2-r0

3.8.2-r1

3.8.2-r2

3.8.2-r3

3.8.2-r4

3.9.5-r0

3.9.5-r1

4.*

4.0.1-r0

4.0.2-r0

4.0.2-r1

4.0.3-r0

4.0.3-r1

4.0.3-r2

4.0.3-r3

4.0.6-r0

4.0.6-r1

4.0.6-r3

4.0.6-r4

Debian:11 / tiff

Package

Name: tiff
Purl: pkg:deb/debian/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.6-3

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / tiff

Package

Name: tiff
Purl: pkg:deb/debian/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.6-3

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / tiff

Package

Name: tiff
Purl: pkg:deb/debian/tiff?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.6-3

Ecosystem specific

{
    "urgency": "low"
}

Git / github.com/vadz/libtiff

Affected ranges

Type: GIT
Repo: https://github.com/vadz/libtiff
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

8a37c8e244de3457283b54986d09a8db4d24381c

Type: GIT
Repo: https://gitlab.com/libtiff/libtiff
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

5612707c086cda76319552a0a2afeddcfa67d1b3

Affected versions

Other

Pre360

Release-

Release-3-7-0

Release-v3-5-

Release-v3-5-4

Release-v3-5-5

Release-v3-5-7

Release-v3-6-0

Release-v3-6-0beta2

Release-v3-6-1

Release-v3-7-0-alpha

Release-v3-7-0beta

Release-v3-7-0beta2

Release-v3-7-1

Release-v3-7-2

Release-v3-7-3

Release-v3-7-4

Release-v3-8-0

Release-v3-8-1

Release-v3-8-2

Release-v4-0-0

Release-v4-0-0alpha

Release-v4-0-0alpha4

Release-v4-0-0alpha5

Release-v4-0-0alpha6

Release-v4-0-0beta7

Release-v4-0-1

Release-v4-0-2

Release-v4-0-3

Release-v4-0-4

Release-v4-0-4beta

Release-v4-0-5

Release-v4-0-6

v3.*

v3.5.3

v3.5.4

v3.5.5

v3.5.7

v3.6.0

v3.6.0beta2

v3.6.1

v3.7.0

v3.7.0alpha

v3.7.0beta

v3.7.0beta2

v3.7.1

v3.7.2

v3.7.3

v3.7.4

v3.8.0

v3.8.1

v3.8.2

v4.*

v4.0.0

v4.0.0alpha

v4.0.0alpha4

v4.0.0alpha5

v4.0.0alpha6

v4.0.0beta7

v4.0.1

v4.0.2

v4.0.3

v4.0.4

v4.0.4beta

v4.0.5

v4.0.6