CVE-2018-7456 Null dereference in n/a

Medium 6.5 Published 24 Feb 2018 Updated 5 Aug 2024

A NULL pointer dereference in LibTIFF allows attackers to cause a denial of service via crafted TIFF files processed by the tiffinfo tool.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-7456?

CVE-2018-7456 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 24 Feb 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)

Weakness: CWE-476

Which versions are affected by CVE-2018-7456?

It affects 3 products.

Linux distribution packages (8)

`compat-libtiff3` Red Hat:enterprise_linux:7::client	All versions	`0:3.9.4-12.el7`
`compat-libtiff3-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:3.9.4-12.el7`
`compat-libtiff3` Red Hat:enterprise_linux:7::computenode	All versions	`0:3.9.4-12.el7`
`compat-libtiff3-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:3.9.4-12.el7`
`compat-libtiff3` Red Hat:enterprise_linux:7::server	All versions	`0:3.9.4-12.el7`
`compat-libtiff3-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:3.9.4-12.el7`
`compat-libtiff3` Red Hat:enterprise_linux:7::workstation	All versions	`0:3.9.4-12.el7`
`compat-libtiff3-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:3.9.4-12.el7`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Libtiff Libtiff.

How do I fix CVE-2018-7456?

Apply the vendor's patch.

Is CVE-2018-7456 being exploited?

There is no known exploitation of CVE-2018-7456 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2018-7456, DEBIAN-CVE-2018-7456, DLA-1346-1, DLA-1347-1, GHSA-43j5-gmq7-54cr, MGASA-2018-0208 and 2 more.