cve/2018/CVE-2018-19210.md

CVE-2018-19210

Description

In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.

POC

Reference

• http://bugzilla.maptools.org/show_bug.cgi?id=2820
• http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html
• https://usn.ubuntu.com/3906-1/

Github

No PoCs found on GitHub currently.