Every CVE Search/ Get API key

CVE-2006-2024

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a...

4.0 MediumPublic exploitFix available

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Exploit likelihood

8.85%Down 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
CVE-2006-2024
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
CVE-2006-2024
Updated
2026-11-02
EUVDEUVD-2006-2025 No score

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
EUVD-2006-2025
Updated
2026-11-03
GitHub AdvisoriesGHSA-gcqf-gvjg-mhm8 No score

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a...

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
GHSA-gcqf-gvjg-mhm8
Updated
2026-11-02
OSV No score

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
CVE-2006-2024
Updated
2026-11-02
OSVDEBIAN-CVE-2006-2024 No score

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Record
DEBIAN-CVE-2006-2024
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 3.8.1
3.8.1
tiff
Debian:13
 before 3.8.1
3.8.1
tiff
Debian:14
 before 3.8.1
3.8.1
tiff
Debian:3.0
From an advisory covering 3 CVEs
 before 3.5.5-7woody1, plus listed versions
3.5.5-6.woody33.5.5-6.woody53.5.5-7
3.5.5-7woody1
tiff
Debian:3.1
From an advisory covering 3 CVEs
 before 3.7.2-3sarge1, plus listed versions
3.7.2-3
3.7.2-3sarge1
libtiff
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
Show 31 moreShow less
Affected packages
PackageAffectedFixed
libtiff-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
kdegraphics
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLibTiff 3.x - Multiple Denial of Service Vulnerabilities2006-04-28

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-2024 is a medium vulnerability (CVSS 4.0) in Libtiff, published April 25, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.85%, the 95th percentile. Fixed in tiff 3.8.1.

References

Show 70 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open