A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | Feb 20, 2019 | Sep 13, 2018 |
| Suse | — | Upgrade libtiff-develUpgrade libtiff5Upgrade tiffUpgrade libtiff-devel-32bitUpgrade libtiff5-32bit | Apr 6, 2019 | Sep 13, 2018 |
| Ubuntu | — | Upgrade libtiff-toolsUpgrade libtiff5 | Apr 1, 2019 | Sep 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub