title: Segmentation fault in fax3encode in libtiff/tif_fax3.c
description: A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
problem types: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
defaultStatus: affected
product: libtiff
vendor: n/a
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:6
defaultStatus: unknown
packageName: libtiff
product: Red Hat Enterprise Linux 6
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:7
defaultStatus: unknown
packageName: compat-libtiff3
product: Red Hat Enterprise Linux 7
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:7
defaultStatus: unknown
packageName: libtiff
product: Red Hat Enterprise Linux 7
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: compat-libtiff3
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: libtiff
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:9
defaultStatus: affected
packageName: libtiff
product: Red Hat Enterprise Linux 9
vendor: Red Hat
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: iv
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: libtiff
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: mingw-libtiff
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: unaffected
packageName: tkimg
product: Fedora
vendor: Fedora
}
metrics:
other: [
content: {'namespace': 'https://access.redhat.com/security/updates/classification/', 'value': 'Moderate'}
type: Red Hat severity rating
]