CVE-2015-8668 Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service v...
CriticalCVSS 9.8
EPSS 13.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tiff(Debian:12) | < 4.0.6-3 | 4.0.6-3 |
| debian/tiff(Debian:13) | < 4.0.6-3 | 4.0.6-3 |
| debian/tiff(Debian:14) | < 4.0.6-3 | 4.0.6-3 |
| libtiff | <= 4.0.6 | No fix listed |
| oracle vm server | = 3.3 | No fix listed |
| oracle vm server | = 3.4 | No fix listed |
| oracle linux | = 6 | No fix listed |
| oracle linux | = 7 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-8668 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- RHSA-2016:1546 third-party-advisory vendor-advisory
- RHSA-2016:1547 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 20151228 libtiff bmp file Heap Overflow (CVE-2015-8668) broken-link mailing-list vdb-entry
- GLSA-201701-16 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking