CVE-2018-17795: Buffer Overflow

Published Sep 30, 2018

Updated

The function t2pwritepdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.

Affected Software

1 affected component

LibTIFF libtiff=4.0.9

Event History

Sep 30, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-17795?

CVE-2018-17795 has a moderate severity level due to its potential to cause denial of service through heap-based buffer overflow.

How do I fix CVE-2018-17795?

To fix CVE-2018-17795, upgrade to a version of LibTIFF that is later than 4.0.9, ensuring you have the latest patches.

What is the impact of CVE-2018-17795?

The impact of CVE-2018-17795 includes application crashes and potential exploitation through crafted TIFF files.

Which version of LibTIFF is affected by CVE-2018-17795?

LibTIFF versions 4.0.9 and earlier are affected by CVE-2018-17795.

Can CVE-2018-17795 lead to remote exploitation?

Yes, CVE-2018-17795 can potentially allow remote attackers to exploit the vulnerability using crafted TIFF files.