CVE-2016-5321

Name

CVE-2016-5321

Description

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html
cve@mitre.org	http://www.debian.org/security/2017/dsa-3762
Third Party Advisory	http://www.securityfocus.com/bid/91209
cve@mitre.org	https://security.gentoo.org/glsa/201701-16

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:o:opensuse:opensuse:13.1:::::::*`	opensuse	== None	== 13.1

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status