CVE-2016-5317

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.96%

Published

Jan 20, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

Weaknesses (CWE)

CWE-119

Affected Products (4)

libtiff · libtiffvulnerable

opensuse · opensusevulnerable

opensuse_project · leapvulnerable

References (16)

http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html

Third Party Advisory

http://www.debian.org/security/2017/dsa-3762

http://www.openwall.com/lists/oss-security/2016/06/15/10

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/06/15/5

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/91208

https://security.gentoo.org/glsa/201701-16

http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html

Third Party Advisory

http://www.debian.org/security/2017/dsa-3762

http://www.openwall.com/lists/oss-security/2016/06/15/10

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/06/15/5

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/91208

https://security.gentoo.org/glsa/201701-16

KEV Catalog EPSS Scores Vendors All CVEs