CVE-2018-18661

MEDIUM

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.

Source: MITRE

Published: 2018-10-26

Updated: 2019-03-05

Type: CWE-476

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 2.8

Severity: MEDIUM

ID	Name	Product	Family	Severity
123390	openSUSE Security Update : tiff (openSUSE-2019-962)	Nessus	SuSE Local Security Checks	medium
122024	Photon OS 2.0: Libtiff PHSA-2019-2.0-0118	Nessus	PhotonOS Local Security Checks	medium
121329	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : tiff vulnerabilities (USN-3864-1)	Nessus	Ubuntu Local Security Checks	medium
120748	Fedora 29 : libtiff (2018-bd18c784de)	Nessus	Fedora Local Security Checks	medium
120487	Fedora 28 : libtiff (2018-67a6bf4ac1)	Nessus	Fedora Local Security Checks	medium
120170	SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:3925-1)	Nessus	SuSE Local Security Checks	medium
119555	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3911-2)	Nessus	SuSE Local Security Checks	medium
119298	openSUSE Security Update : tiff (openSUSE-2018-1480)	Nessus	SuSE Local Security Checks	medium
119297	openSUSE Security Update : tiff (openSUSE-2018-1479)	Nessus	SuSE Local Security Checks	medium
119214	SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3911-1)	Nessus	SuSE Local Security Checks	medium
119143	SUSE SLES11 Security Update : tiff (SUSE-SU-2018:3879-1)	Nessus	SuSE Local Security Checks	high
119126	Fedora 27 : libtiff (2018-399bce9f8f)	Nessus	Fedora Local Security Checks	medium
118903	Slackware 14.2 / current : libtiff (SSA:2018-316-01)	Nessus	Slackware Local Security Checks	medium