[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fc7ZUPZimQwJ8KdP37fsNVxegFTMKtEL_ra_f3FSl6YI":3,"g5a-risk:CVE-2018-12900":165},{"success":4,"data":5,"meta":163},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":62,"references":63,"referencesCount":96,"weaknesses":97,"weaknessesCount":106,"isActivelyExploited":107,"cisaInfo":15,"otxData":15,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":154,"notableEvents":155},"CVE-2018-12900","What is CVE-2018-12900?","Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0a...","2018-06-26T22:29:00.257","2021-03-05T19:15:13.75",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.25183,[40,40,40,40,40,40,40],"High",[44,48,53,56,59],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"libtiff","4.0.9","cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",5,[64,71,75,78,82,86,90,93],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fbugzilla.maptools.org\u002Fshow_bug.cgi?id=2798","Maptools",[68,69,70],"Exploit","Issue Tracking","Third Party Advisory",{"url":72,"source":73,"tags":74},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2053","Red Hat",[],{"url":76,"source":73,"tags":77},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3419",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fgithub.com\u002FHack-Me\u002FPocs_for_Multi_Versions\u002Ftree\u002Fmain\u002FCVE-2018-12900","GitHub",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F11\u002Fmsg00027.html","Debian",[],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fusn.ubuntu.com\u002F3906-1\u002F","Ubuntu",[70],{"url":91,"source":88,"tags":92},"https:\u002F\u002Fusn.ubuntu.com\u002F3906-2\u002F",[],{"url":94,"source":84,"tags":95},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4670",[],8,[98],{"id":99,"name":100,"description":101,"extendedDescription":102,"status":103,"abstraction":104,"structure":105},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2018-12900? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12900, a high severity cyber security vulnerability from 2018. Heap-based buffer overflow in the cpSeparateBufToContigBuf ...","CVE-2018-12900, CVE-2018-12900 vulnerability, CVE-2018-12900 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, libtiff security, canonical security, libtiff vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-12900",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":10,"dateModified":11,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12900","Cybersecurity","CVE-2018-12900, CVE-2018-12900 vulnerability, CVE-2018-12900 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135,142],{"Operator":15,"Negate":15,"Nodes":136},[137],{"Operator":138,"Negate":15,"CPEMatch":139},"OR",[140],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":141,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"27374BA0-7A61-4BDC-9F92-C09E99A9AB81",{"Operator":15,"Negate":15,"Nodes":143},[144],{"Operator":138,"Negate":15,"CPEMatch":145},[146,148,150,152],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":147,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":151,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":153,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"07C312A0-CD2C-4B9C-B064-6409B25C278F",[],[156],{"id":157,"eventType":158,"eventTime":159,"details":160,"label":161,"color":162},"8b21c2d2-d331-4fda-b510-806dcbae1f61","HIGH_EPSS_DELTA","2025-11-22T04:06:41.193731+00:00","Daily EPSS score increased by 0.104 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":164,"version":33},1792240159108,{"score":166,"band":167,"action":168,"scoredAt":169},52,"Medium","Plan remediation","2026-10-16T06:44:19.947337+00:00"]