关键信息 漏洞概述 名称: CVE-2015-7313 描述: LibTIFF 允许远程攻击者通过精心制作的 TIFF 文件导致拒绝服务(内存消耗和崩溃)。 来源: CVE (在 NVD, CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search 等) Debian Bugs: 800124 受影响和已修复的包 固定版本信息 备注 [jessie] - tiff (Minor issue) [wheezy] - tiff (Can't reproduce) [squeeze] - tiff (Can't reproduce the issue, file is rejected with "Integer overflow in TIFFVStripSize" and "cannot handle") [wheezy] - tiff3 (Can't reproduce the issue, file is rejected with "Integer overflow in TIFFVStripSize" and "cannot handle") 测试文件: https://marc.info/?l=oss-security&m=144284777006804&q=p6 使用 "ltrace -e realloc tiffdither /tmp/oom.tif /dev/null" 进行重现,最终显示 "libtiff.so.5->realloc(0, 1636178024)"