CVE-2017-11613

In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.

References

Affected packages

Git / github.com/vadz/libtiff

Affected ranges

Type

GIT

Repo

https://github.com/vadz/libtiff

Events

Introduced

4a25fa0efc03a4e71740efc748c24b93152b1807

Last Affected

4a25fa0efc03a4e71740efc748c24b93152b1807

Database specific

Show details

{
    "cpe": "cpe:2.3:a:libtiff:libtiff:4.0.8:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.8"
        },
        {
            "last_affected": "4.0.8"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*

4.0.8

Other

Release-v4-0-8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11613.json"

Git / gitlab.com/libtiff/libtiff