CVE-2014-8130: Divide by Zero
Divide by zero was reported in the libtiff tiffdither tool:
- CVE-2014-8130 libtiff: Divide By Zero in the tiffdither tool http://bugzilla.maptools.org/showbug.cgi?id=2483
The above upstream bug was fixed by one of the commits that fix CVE-2014-8127 / CVE-2014-8128 / CVE-2014-8129
Other sources
The TIFFmalloc function in tifunix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tifwrite.c, as demonstrated by tiffdither.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8130?
CVE-2014-8130 has a low severity rating due to its nature of causing a divide by zero error.
How do I fix CVE-2014-8130?
To fix CVE-2014-8130, update the libtiff package to the latest version available in your distribution's repositories.
Which software is affected by CVE-2014-8130?
CVE-2014-8130 affects specific versions of libtiff, as well as Red Hat Enterprise Linux and macOS versions noted in the vulnerability details.
Can CVE-2014-8130 be exploited remotely?
CVE-2014-8130 is not known to be remotely exploitable, making it less of a risk in remote environments.
What products are impacted by CVE-2014-8130?
Products impacted by CVE-2014-8130 include libtiff version 4.0.3 and various releases of Red Hat Enterprise Linux and macOS Yosemite.