CVE-2017-7599: Input Validation
Last updated 25 August 2025
Other sources
LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tiffto a version that resolves this vulnerability.Fixed in 4.2.0-1+deb11u5Fixed in 4.2.0-1+deb11u8Fixed in 4.5.0-6+deb12u4Fixed in 4.7.0-3+deb13u2Fixed in 4.7.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7599?
CVE-2017-7599 has a severity level that could allow remote attackers to cause denial of service through application crashes.
How do I fix CVE-2017-7599?
To fix CVE-2017-7599, upgrade to versions 4.2.0-1+deb11u5, 4.2.0-1+deb11u6, 4.5.0-6+deb12u1, or higher.
What software is affected by CVE-2017-7599?
CVE-2017-7599 affects the LibTIFF version 4.0.7 and certain Debian tiff packages.
Can CVE-2017-7599 lead to any other impacts besides denial of service?
CVE-2017-7599 may have unspecified impacts beyond denial of service, potentially affecting system stability.
Which versions of LibTIFF are vulnerable to CVE-2017-7599?
LibTIFF version 4.0.7 is specifically identified as vulnerable to CVE-2017-7599.