CVE-2018-17000

A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to…

published September 13, 2018

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03250 · 88.2th percentile
Published
2018-09-13T16:00Z
EPSS history
Timeline
  • 13 SEP 16:00Z
    A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to…
    cvelistv5