CVE-2016-5322

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3762Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/15/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/91204Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91205Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1346694Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-16Third Party Advisory
http://www.debian.org/security/2017/dsa-3762Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/15/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/91204Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91205Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1346694Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-16Third Party Advisory

Timeline

Published: Apr 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-53237.5The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and applic CVE-2016-53256.1CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.CVE-2016-53285.5VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel m CVE-2016-53295.5VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addre CVE-2016-53307.8Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware W CVE-2016-53316.1CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers an CVE-2016-53325.3Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files vi CVE-2016-53339.8VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain CVE-2016-53345.3VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/MET CVE-2016-53357.8VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vect CVE-2016-53369.8VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2016-53375.5The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory informa