CVE-2018-5784: canonical ubuntu_linux Uncontrolled Resource Consumption
Vulnerability summary
CVE-2018-5784 is a medium (CVSS 6.5) Uncontrolled Resource Consumption vulnerability in canonical ubuntu_linux. EPSS estimates a 2.96% chance of exploitation in the next 30 days, higher than 87% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 8 · Related 4Timeline
- 19-01-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.96%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.96% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.maptools.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- tiff< 4.0.9-4
- debian_linuxEOL7.0 | 8.0 | 9.0
Alpine1 product
- tiff< 4.0.9-r2
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 17.10
Libtiff1 product
- libtiff4.0.9
Ubuntu1 product
- tiff< 4.0.3-7ubuntu0.8 | < 4.0.6-1ubuntu0.3
5 vendors · 6 products
References
13 links
lists.debian.org/debian-lts-announce/2018/05/msg00022.htmlMailing ListX Refsource MLISTThird Party Advisory- lists.debian.org/debian-lts-announce/2018/07/msg00002.htmlMailing ListX Refsource MLISTThird Party Advisory
- gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6efX Refsource CONFIRMPatchThird Party Advisory