CVE-2018-5784

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.

• CWE-400

• http://bugzilla.maptools.org/show_bug.cgi?id=2772Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6efPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00022.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00002.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3602-1/Third Party Advisory
• https://usn.ubuntu.com/3606-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4349Third Party Advisory
• http://bugzilla.maptools.org/show_bug.cgi?id=2772Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6efPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00022.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00002.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3602-1/Third Party Advisory
• https://usn.ubuntu.com/3606-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4349Third Party Advisory

Published

Jan 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5778An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5779A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5780A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5781A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5782A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5783In PoDoFo 0.9.5, there is an uncontrolled memory allocation …
• CVE-2018-5785In OpenJPEG 2.3.0, there is an integer overflow caused by an…6.5
• CVE-2018-5786In Long Range Zip (aka lrzip) 0.631, there is an infinite lo…5.5
• CVE-2018-5787An issue was discovered in Extreme Networks ExtremeWireless …
• CVE-2018-5788An issue was discovered in Extreme Networks ExtremeWireless …
• CVE-2018-5789An issue was discovered in Extreme Networks ExtremeWireless …
• CVE-2018-5790An issue was discovered in Extreme Networks ExtremeWireless …