CVE-2017-10688

HIGH7.5EPSS 3.8%

tiff - security update

Published: 6/29/2017Modified: 12/3/2025

Also known as:ALPINE-CVE-2017-10688DEBIAN-CVE-2017-10688

Description

In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.

Affected packages (4)

Alpine/tifffrom 0, < 4.0.8-r1
Debian/tifffrom 0, < 4.0.8-3
Debian/tifffrom 0, < 4.0.2-6+deb7u15
Debian/tifffrom 0, < 4.0.3-12.3+deb8u4

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2017-10688
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-10688