CVE-2018-19210: Null Pointer Dereference
In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tifdirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
Other sources
LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference in the TIFFWriteDirectorySec function in tifdirwrite.c. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tiffto a version that resolves this vulnerability.Fixed in 4.0.10-4Fixed in 4.0.8-2+deb9u5 - Upgrade
Upgrade
debian/tiffto a version that resolves this vulnerability.Fixed in 4.2.0-1+deb11u5Fixed in 4.2.0-1+deb11u8Fixed in 4.5.0-6+deb12u4Fixed in 4.7.0-3+deb13u2Fixed in 4.7.0-3+deb13u3Fixed in 4.7.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19210?
CVE-2018-19210 has been classified as a vulnerability that allows for denial of service due to a NULL pointer dereference.
How do I fix CVE-2018-19210?
To fix CVE-2018-19210, you should update LibTIFF to version 4.0.10 or later.
What software is affected by CVE-2018-19210?
Affected software includes LibTIFF versions up to 4.0.9 and certain versions of IBM Cognos Analytics.
Can CVE-2018-19210 lead to any security issues beyond denial of service?
CVE-2018-19210 is specifically known for denial of service and does not indicate other exploits in the current reports.
Is CVE-2018-19210 exploitable remotely?
Yes, CVE-2018-19210 can be exploited remotely through crafted TIFF files processed by affected applications.