CVE-2017-17095

A vulnerability was found in LibTIFF, where a heap-based buffer overflow in the pal2rgb function in tools/pal2rgb.c can lead to a denial of service, a remote attacker could exploit this flaw by persuading a victim to open a specially crafted file, causing the application to crash.

This vulnerability is rated as moderate because it allows a remote attacker to trigger a denial of service through a heap-based buffer overflow, exploiting this flaw would crash the application, affecting availability without compromising system integrity.

This vulnerability affects the pal2rgb executable which is part of the tools distributed with libtiff upstream, but shipped in libtiff-tools RPM package instead of libtiff package on Red Hat Enterprise Linux distribution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.