CVE-2018-8905

Name

CVE-2018-8905

Description

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

NVD Severity

high

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Exploit	https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow
Exploit	http://bugzilla.maptools.org/show_bug.cgi?id=2780
Mailing List	https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html
Mailing List	https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html
Mailing List	https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html
Third Party Advisory	https://www.debian.org/security/2018/dsa-4349
Third Party Advisory	https://usn.ubuntu.com/3864-1/
Patch	https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d
REDHAT	https://access.redhat.com/errata/RHSA-2019:2053

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:libtiff:libtiff:4.0.9:::::::*`	libtiff	== None	== 4.0.9

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status