Medium
Security advisory
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-5784
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:04 UTC · Revision 1
Source evidence
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
osv:CVE-2018-5784
Complete source record
{
"id": "6f9e74854a62e7f3a12f45a38d71e86b9590d1b8a01f6e49b981f64646b1a1a8",
"url": "https://osv.dev/vulnerability/CVE-2018-5784",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-5784",
"summary": "In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.",
"evidence": "osv:CVE-2018-5784",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-5784",
"aliases": [
"CVE-2018-5784"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/vadz/libtiff",
"type": "GIT",
"events": [
{
"introduced": "636f2684a0faaf9510ae4219f286a53f98f37483"
},
{
"last_affected": "636f2684a0faaf9510ae4219f286a53f98f37483"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.9"
},
{
"last_affected": "4.0.9"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"4.0.9",
"Release-v4-0-9"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5784.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.com/libtiff/libtiff",
"type": "GIT",
"events": [
{
"introduced": "020bd2fd3b4235b2175dafa9633d2b191c50e7cd"
},
{
"last_affected": "020bd2fd3b4235b2175dafa9633d2b191c50e7cd"
},
{
"fixed": "473851d211cf8805a161820337ca74cc9615d6ef"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.9"
},
{
"last_affected": "4.0.9"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "473851d211cf8805a161820337ca74cc9615d6ef"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"4.0.9",
"v4.0.9"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5784.json",
"vanir_signatures": [
{
"id": "CVE-2018-5784-32fcc861",
"digest": {
"threshold": 0.9,
"line_hashes": [
"75831772826903519163531091244361149601",
"78375691951534252794824230083328114641",
"293301950844137652162995674059519515684",
"199221968750314404018989121865056121067",
"5327546639558208921209613398130438931",
"131256751223841078268448253529362595545",
"330585039822195982558293263417307448225"
]
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "tools/tiff2pdf.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5784-4a632204",
"digest": {
"length": 5724,
"function_hash": "213609115515777586211141951442237006584"
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "tools/tiff2pdf.c",
"function": "t2p_read_tiff_init"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5784-6a8edbef",
"digest": {
"length": 1584,
"function_hash": "217941978878947320029816834975166642295"
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "contrib/addtiffo/tif_overview.c",
"function": "TIFF_WriteOverview"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5784-8be40752",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280118026582751531607203991365373546876",
"43719099175510905525229923302533711661",
"70680763122485257495134726048061920842",
"57881666676319679057535677400894311885",
"106582711542385200867802239147585812831",
"132354293960869030127950657134287496699",
"55761791276588461682510708734136367267",
"337647114143564325189136562211559769739",
"223325157716770488910409838864759636822",
"42083156524159150658991999267604601331",
"204171970194303696611234922170369988794"
]
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "contrib/addtiffo/tif_overview.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5784-af240c7b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172353140212210332738028602722684502789",
"253628019908197467971345379500435746871",
"314230488715923400105651815237839916662",
"77322807136046078891198257595381707816",
"69718155279689978593491466533212242267",
"216893751462658506253463015470644614992",
"302612334229579431412840180403522687990",
"63355102319794581852982502112322842388",
"228539468221171595535354674831310576492",
"19616000769208776864051079112019526069"
]
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "tools/tiffcrop.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5784-d6b69b9f",
"digest": {
"length": 5554,
"function_hash": "98152871295658607399717771184892726884"
},
"source": "https://gitlab.com/libtiff/libtiff@473851d211cf8805a161820337ca74cc9615d6ef",
"target": {
"file": "tools/tiffcrop.c",
"function": "main"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:05:41Z"
}
}
],
"modified": "2026-10-24T14:05:41.559665918Z",
"provider": "osv",
"references": [
"https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html",
"https://usn.ubuntu.com/3602-1/",
"https://usn.ubuntu.com/3606-1/",
"https://www.debian.org/security/2018/dsa-4349",
"https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6ef"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "17.10"
},
{
"last_affected": "17.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-5784",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442996,
"published_at": "2018-01-19T08:29:00.32+00:00"
}