CVE-2018-17000

A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.

• CWE-476

• http://bugzilla.maptools.org/show_bug.cgi?id=2811Exploit, Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html
• http://www.securityfocus.com/bid/105342Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00026.htmlThird Party Advisory
• https://usn.ubuntu.com/3906-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4670
• http://bugzilla.maptools.org/show_bug.cgi?id=2811Exploit, Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html
• http://www.securityfocus.com/bid/105342Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00026.htmlThird Party Advisory
• https://usn.ubuntu.com/3906-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4670

Published

Sep 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16986Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and…
• CVE-2018-16987Squash TM through 1.18.0 presents the cleartext passwords of…
• CVE-2018-16988An issue was discovered in Open XDMoD through 7.5.0. An auth…9.8
• CVE-2018-1699IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable …6.3
• CVE-2018-16994An issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0…7.5
• CVE-2018-16999Netwide Assembler (NASM) 2.14rc15 has an invalid memory writ…
• CVE-2018-17001On the RICOH SP 4510SF printer, HTML Injection and Stored XS…
• CVE-2018-17002On the RICOH MP 2001 printer, HTML Injection and Stored XSS …
• CVE-2018-17003In LimeSurvey 3.14.7, HTML Injection and Stored XSS have bee…
• CVE-2018-17004An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and T…
• CVE-2018-17005An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and T…
• CVE-2018-17006An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and T…