CVE-2016-6223 The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a n...
CriticalCVSS 9.1
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tiff(Debian:12) | < 4.0.6-2 | 4.0.6-2 |
| debian/tiff(Debian:13) | < 4.0.6-2 | 4.0.6-2 |
| debian/tiff(Debian:14) | < 4.0.6-2 | 4.0.6-2 |
| libtiff | <= 4.0.6 | No fix listed |
References
- Debian Security Tracker CVE-2016-6223 vendor-advisory
- libtiff.maptools.org patch
- DSA-3762 vendor-advisory
- [oss-security] 20160713 CVE request: Information leak in LibTIFF mailing-list
- [oss-security] 20160714 Re: CVE request: Information leak in LibTIFF mailing-list
- 91741 vdb-entry
- GLSA-201701-16 vendor-advisory
- bugs.debian.org issue-tracking