LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-     read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27. (CVE-2018-5360)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In LibTIFF 4.0.8, there is a heap-based buffer overflow     in the t2p_write_pdf function in tools/tiff2pdf.c. This     heap overflow could lead to different damages. For     example, a crafted TIFF document can lead to an     out-of-bounds read in TIFFCleanup, an invalid free in     TIFFClose or t2p_free, memory corruption in     t2p_readwrite_pdf_image, or a double free in t2p_free.
    Given these possibilities, it probably could cause     arbitrary code execution.(CVE-2017-9935)

  - LibTIFF before 4.0.6 mishandles the reading of TIFF     files, as demonstrated by a heap-based buffer over-read     in the ReadTIFFImage function in coders/tiff.c in     GraphicsMagick 1.3.27.(CVE-2018-5360)

  - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows     remote attackers to cause a denial of service     (TIFFSetupStrips heap-based buffer overflow and     application crash) or possibly have unspecified other     impact via a crafted TIFF file.(CVE-2017-17095)

  - TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a     heap-based buffer over-read, as demonstrated by     bmp2tiff.(CVE-2018-10779)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
222616	Linux Distros Unpatched Vulnerability : CVE-2018-5360	Nessus	Misc.	Local	high
129249	EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2019-2056)	Nessus	Huawei Local Security Checks	Local	high
128909	EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2019-1857)	Nessus	Huawei Local Security Checks	Local	high

Detections

Analytics

CVE-2018-5360

high

Tenable Plugins

high

high

high