[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhPuKPHRDXBFSuoLnZ1VEvXTG7jRdvD-gF61Us9Bfnjk":3,"g5a-risk:CVE-2018-18557":197},{"success":4,"data":5,"meta":195},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":70,"references":71,"referencesCount":113,"weaknesses":114,"weaknessesCount":123,"isActivelyExploited":124,"cisaInfo":15,"otxData":15,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":179,"notableEvents":180},"CVE-2018-18557","What is CVE-2018-18557?","LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write.","LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0...","2018-10-22T16:29:00.267","2021-03-05T18:15:12.377",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.1496,[40,40,40,40,40,40,40],"High",[44,48,53,56,61,64,67],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"libtiff","4.0.9","cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":62,"criteria":63,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":65,"criteria":66,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":68,"criteria":69,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",7,[72,76,80,84,88,93,97,101,104,107],{"url":73,"source":74,"tags":75},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2053","Red Hat",[],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fgithub.com\u002FHack-Me\u002FPocs_for_Multi_Versions\u002Ftree\u002Fmain\u002FCVE-2018-18557","GitHub",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fgitlab.com\u002Flibtiff\u002Flibtiff\u002Fcommit\u002F681748ec2f5ce88da5f9fa6831e1653e46af8a66","Gitlab",[],{"url":85,"source":82,"tags":86},"https:\u002F\u002Fgitlab.com\u002Flibtiff\u002Flibtiff\u002Fmerge_requests\u002F38",[87],"Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F10\u002Fmsg00019.html","Debian",[92,87],"Mailing List",{"url":94,"source":95,"tags":96},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201904-15","Gentoo",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fusn.ubuntu.com\u002F3864-1\u002F","Ubuntu",[87],{"url":102,"source":99,"tags":103},"https:\u002F\u002Fusn.ubuntu.com\u002F3906-2\u002F",[],{"url":105,"source":90,"tags":106},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4349",[87],{"url":108,"source":109,"tags":110},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45694\u002F","Exploit-db",[111,112,87],"Exploit","VDB Entry",10,[115],{"id":116,"name":117,"description":118,"extendedDescription":119,"status":120,"abstraction":121,"structure":122},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2018-18557? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18557, a high severity cyber security vulnerability from 2018. LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0...","CVE-2018-18557, CVE-2018-18557 vulnerability, CVE-2018-18557 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, libtiff security, debian security, canonical security, libtiff vulnerability, debian_linux vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-18557",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18557","Cybersecurity","CVE-2018-18557, CVE-2018-18557 vulnerability, CVE-2018-18557 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,159,167],{"Operator":15,"Negate":15,"Nodes":153},[154],{"Operator":155,"Negate":15,"CPEMatch":156},"OR",[157],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"27374BA0-7A61-4BDC-9F92-C09E99A9AB81",{"Operator":15,"Negate":15,"Nodes":160},[161],{"Operator":155,"Negate":15,"CPEMatch":162},[163,165],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":155,"Negate":15,"CPEMatch":170},[171,173,175,177],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"07C312A0-CD2C-4B9C-B064-6409B25C278F",[],[181,188],{"id":182,"eventType":183,"eventTime":184,"details":185,"label":186,"color":187},"2fd32ba9-4092-4b12-98fa-53bc246f8aeb","HIGH_EPSS_DELTA","2025-11-19T04:06:49.120538+00:00","Daily EPSS score increased by 0.231 on 2023-12-30","EPSS Score Increased","red",{"id":189,"eventType":190,"eventTime":191,"details":192,"label":193,"color":194},"452065b8-693e-4e11-9723-5504b2852fa0","LOW_EPSS_DELTA","2025-11-22T04:06:37.4021+00:00","Daily EPSS score decreased by 0.272 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":196,"version":33},1792240159057,{"score":198,"band":199,"action":200,"scoredAt":201},54,"Medium","Plan remediation","2026-10-16T06:45:04.861769+00:00"]