CVE-2016-10092
Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.38% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- libtiff/libtiff
- Source
- cve@mitre.org
References
- http://bugzilla.maptools.org/show_bug.cgi?id=2620Exploit, Issue Tracking
- http://bugzilla.maptools.org/show_bug.cgi?id=2622Exploit, Issue Tracking
- http://www.debian.org/security/2017/dsa-3762
- http://www.openwall.com/lists/oss-security/2017/01/01/10Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/01/12Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/95218
- https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory
- https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10092
- https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6aPatch
- http://bugzilla.maptools.org/show_bug.cgi?id=2620Exploit, Issue Tracking
- http://bugzilla.maptools.org/show_bug.cgi?id=2622Exploit, Issue Tracking
- http://www.debian.org/security/2017/dsa-3762
- http://www.openwall.com/lists/oss-security/2017/01/01/10Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/01/12Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/95218
- https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory
- https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10092
- https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6aPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.