Errata ID | 483 |
---|---|
Date | 2018-08-15 |
Source package | tiff |
Fixed in version | 4.0.3-12.3+deb8u6 |
Description | This update addresses the following issues: * Memory leak via corrupt td_imagelength in TIFFOpen function (CVE-2017-11613) * uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c (CVE-2018-5784) * NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service (CVE-2018-7456) * heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service (CVE-2018-8905) * reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c (CVE-2018-10963) * Reachable assertion abort in the function TIFFWriteDirectorySec() (CVE-2017-13726) * NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash (CVE-2017-18013) |
Additional notes | |
CVE ID | CVE-2017-11613 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2018-10963 CVE-2017-18013 CVE-2017-13726 |
UCS Bug number | #47545 |