vulnerability

Amazon Linux AMI: CVE-2016-3632: Security patch for libtiff (ALAS-2016-733)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
2016-08-17
Added
2016-08-22
Modified
2018-02-02

Description

The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.

Solution

amazon-linux-upgrade-libtiff
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.