CveMateVulnerability intelligence

CVE-2009-2285: libtiff

CVSS: 4.3v2.0MediumModified

AliasesDEBIAN-CVE-2009-2285

Published 01-07-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-2285 is a medium (CVSS 4.3) vulnerability in libtiff. EPSS estimates a 8.95% chance of exploitation in the next 30 days, higher than 95.2% of scored vulnerabilities. 7 public exploits are recorded.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

8.95%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits7reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 3 · Related 1

DSA-1835-1 OPENSUSE-SU-2024:10554-1 RHSA-2009:1159

Timeline

01-07-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

8.95%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.95% on 21-09-2026

21-09-202621-10-2026

EPSS score

8.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

7 found

referenceUnverified
Exploit Reference (bugzilla.maptools.org)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (lan.st)
Maturity: unknown

Show all 7 exploits

referenceUnverified
Exploit Reference (bugs.launchpad.net)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
exploit-databasedoslinuxVerified
LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow
Maturity: poc
exploit-databasedosmultipleVerified
LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Debian1 product

tiff< 3.8.2-12

Libtiff1 product

libtiff3.8.2

2 vendors · 2 products

References

42 links

lists.apple.com/archives/security-announce/2010/Mar/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/35866Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2009/1637VDB EntryX Refsource VUPEN
www.openwall.com/lists/oss-security/2009/06/23/1Mailing ListX Refsource MLIST
bugzilla.maptools.org/show_bug.cgi?id=2065X Refsource CONFIRMExploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/39135Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT4004X Refsource CONFIRM

Show all 42 references

lists.apple.com/archives/security-announce/2010/Jan/msg00000.htmlVendor AdvisoryX Refsource APPLE
usn.ubuntu.com/797-1/Vendor AdvisoryX Refsource UBUNTU
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145VDB EntrySignatureX Refsource OVAL
support.apple.com/kb/HT4105X Refsource CONFIRM
secunia.com/advisories/35716Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.htmlVendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2009/06/22/1Mailing ListX Refsource MLISTExploit
secunia.com/advisories/35912Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT4070X Refsource CONFIRM
lists.apple.com/archives/security-announce/2010/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/35883Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/2727VDB EntryX Refsource VUPEN
secunia.com/advisories/35695Third Party AdvisoryX Refsource SECUNIA
www.lan.st/showthread.php?t=1856&page=3X Refsource MISCExploit
secunia.com/advisories/36194Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/36831Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200908-03.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2009/3184VDB EntryX Refsource VUPEN
support.apple.com/kb/HT4013X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.htmlVendor AdvisoryX Refsource FEDORA
lists.apple.com/archives/security-announce/2010//Mar/msg00003.htmlVendor AdvisoryX Refsource APPLE
sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/support/errata/RHSA-2009-1159.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/38241Third Party AdvisoryX Refsource SECUNIA
bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149X Refsource CONFIRMExploit
lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.htmlVendor AdvisoryX Refsource FEDORA
www.debian.org/security/2009/dsa-1835Vendor AdvisoryX Refsource DEBIAN
www.openwall.com/lists/oss-security/2009/06/29/5Mailing ListX Refsource MLISTExploit
www.vupen.com/english/advisories/2010/0173VDB EntryX Refsource VUPEN
support.apple.com/kb/HT3937X Refsource CONFIRM
security-tracker.debian.org/tracker/CVE-2009-2285Advisory