CVE-2017-16232

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue

• CWE-772

• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.htmlThird Party Advisory
• http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/32Mailing List, Patch, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Dec/47Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101696Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.htmlThird Party Advisory
• http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/32Mailing List, Patch, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Dec/47Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/11/01/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101696Third Party Advisory, VDB Entry

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16227The aspath_put function in bgpd/bgp_aspath.c in Quagga befor…
• CVE-2017-16228Dulwich before 0.18.5, when an SSH subprocess is used, allow…
• CVE-2017-16229In the Ox gem 2.8.1 for Ruby, the process crashes with a sta…
• CVE-2017-1623IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting…
• CVE-2017-16230In admin/write-post.php in Typecho through 1.1, one can log …
• CVE-2017-16231In PCRE 8.41, after compiling, a pcretest load test PoC prod…5.5
• CVE-2017-16237In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file…
• CVE-2017-16239In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 1…
• CVE-2017-1624IBM QRadar 7.3 and 7.3.1 specifies permissions for a securit…4.2
• CVE-2017-16241Incorrect access control in AMAG Symmetry Door Edge Network …
• CVE-2017-16242An issue was discovered on MECO USB Memory Stick with Finger…
• CVE-2017-16244Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka…