UBUNTU-CVE-2018-7456

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2018-7456

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-7456.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-7456

Related

Published

2018-02-24T00:00:00Z

Modified

2018-02-24T00:00:00Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)

References

Affected packages

Ubuntu:14.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.3-7ubuntu0.10

Affected versions

4.*

4.0.2-4ubuntu3

4.0.3-5ubuntu1

4.0.3-6

4.0.3-6ubuntu1

4.0.3-7

4.0.3-7ubuntu0.1

4.0.3-7ubuntu0.2

4.0.3-7ubuntu0.3

4.0.3-7ubuntu0.4

4.0.3-7ubuntu0.6

4.0.3-7ubuntu0.7

4.0.3-7ubuntu0.8

4.0.3-7ubuntu0.9

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "negligible",
    "binaries": [
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff-doc"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff-opengl"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff-opengl-dbgsym"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff-tools"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff-tools-dbgsym"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff4-dev"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff5"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff5-alt-dev"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff5-dbgsym"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiff5-dev"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiffxx5"
        },
        {
            "binary_version": "4.0.3-7ubuntu0.10",
            "binary_name": "libtiffxx5-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.6-1ubuntu0.5

Affected versions

4.*

4.0.3-12.3ubuntu2

4.0.5-1

4.0.6-1

4.0.6-1ubuntu0.1

4.0.6-1ubuntu0.2

4.0.6-1ubuntu0.3

4.0.6-1ubuntu0.4

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "negligible",
    "binaries": [
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff-doc"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff-opengl"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff-opengl-dbgsym"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff-tools"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff-tools-dbgsym"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff5"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff5-dbgsym"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiff5-dev"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiffxx5"
        },
        {
            "binary_version": "4.0.6-1ubuntu0.5",
            "binary_name": "libtiffxx5-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.9-5

Affected versions

4.*

4.0.8-5

4.0.8-6

4.0.9-1

4.0.9-2

4.0.9-3

4.0.9-4

4.0.9-4ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "negligible",
    "binaries": [
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-dev"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-doc"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-opengl"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-opengl-dbgsym"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-tools"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff-tools-dbgsym"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff5"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff5-dbgsym"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiff5-dev"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiffxx5"
        },
        {
            "binary_version": "4.0.9-5",
            "binary_name": "libtiffxx5-dbgsym"
        }
    ]
}