CVE-2017-16232

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue

Exploitation of this vulnerability requires that an attacker can cause LibTIFF to process a specially crafted malicious file. This is only possible if a system allows untrusted users to submit images, or alternatively, if a user unknowingly takes an action to process a malicious image. Additionally, successful exploitation will result only in a Denial-of-Service (DoS) to the service or process that incorporates LibTIFF. For those reasons, Red Hat's analysis indicates the overall security impact of this flaw is Low.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.