ByteOS Network

CVE Vulnerability Details :

CVE-2017-5225

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-12 Jan, 2017 | 11:00

Updated At-02 Mar, 2026 | 20:56

▼CVE Numbering Authority (CNA)

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.debian.org/security/2017/dsa-3844	vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/201709-27	vendor-advisory x_refsource_GENTOO
http://bugzilla.maptools.org/show_bug.cgi?id=2656	x_refsource_CONFIRM
http://bugzilla.maptools.org/show_bug.cgi?id=2657	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037911	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/95413	vdb-entry x_refsource_BID
https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7	x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2017/dsa-3844

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://security.gentoo.org/glsa/201709-27

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://bugzilla.maptools.org/show_bug.cgi?id=2656

Resource:

x_refsource_CONFIRM

Hyperlink: http://bugzilla.maptools.org/show_bug.cgi?id=2657

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1037911

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/95413

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.debian.org/security/2017/dsa-3844	vendor-advisory x_refsource_DEBIAN x_transferred
https://security.gentoo.org/glsa/201709-27	vendor-advisory x_refsource_GENTOO x_transferred
http://bugzilla.maptools.org/show_bug.cgi?id=2656	x_refsource_CONFIRM x_transferred
http://bugzilla.maptools.org/show_bug.cgi?id=2657	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1037911	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/95413	vdb-entry x_refsource_BID x_transferred
https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.debian.org/security/2017/dsa-3844

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201709-27

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://bugzilla.maptools.org/show_bug.cgi?id=2656

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://bugzilla.maptools.org/show_bug.cgi?id=2657

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id/1037911

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/95413

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7

Resource:

x_refsource_CONFIRM

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-122	CWE-122 Heap-based Buffer Overflow

Type: CWE

CWE ID: CWE-122

Description: CWE-122 Heap-based Buffer Overflow

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References