National Vulnerability Database

National Vulnerability Database

National Vulnerability

Vulnerability Change Record for CVE-2018-14373

Change History

CVE Modified by [Source] - 8/8/2018 9:29:03 PM

Action Type Old Value New Value
Changed Display Vulnerability
Changed Description
An issue was discovered in LibTIFF 4.0.9. In TIFFFindField in tif_dirinfo.c, the structure tif is being dereferenced without first checking that the structure is not empty and has the requested fields (tif_foundfield). In the call sequences following from the affected library functions (TIFFVGetField, TIFFVGetFieldDefaulted, TIFFVStripSize, TIFFScanlineSize, TIFFTileSize, TIFFGetFieldDefaulted, and TIFFGetField), this sanitization of the tif structure is never being done and, hence, using them with an invalid or empty tif structure will trigger a buffer overflow, leading to a crash.
** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
Removed Reference [No Types Assigned]
Removed Reference [No Types Assigned]