Errata ID | 539 |
---|---|
Date | 2018-11-01 |
Source package | tiff |
Fixed in version | 4.0.3-12.3+deb8u7 |
Description | This update addresses the following issues: * Integer overflow in multiply_ms in tools/ppm2tiff.c (CVE-2018-17100) * Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c (CVE-2018-17101) * LibTIFF 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write. (CVE-2018-18557) |
Additional notes | |
CVE ID | CVE-2018-17100 CVE-2018-17101 CVE-2018-18557 |
UCS Bug number | #48070 |