A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libtiffalma-upgrade-libtiff-develalma-upgrade-libtiff-tools | Nov 6, 2024 | Aug 12, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libtiffamazon-linux-ami-2-upgrade-libtiff-debuginfoamazon-linux-ami-2-upgrade-libtiff-develamazon-linux-ami-2-upgrade-libtiff-staticamazon-linux-ami-2-upgrade-libtiff-tools | Oct 3, 2024 | Aug 12, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libtiffamazon-linux-2023-upgrade-libtiff-debuginfoamazon-linux-2023-upgrade-libtiff-debugsourceamazon-linux-2023-upgrade-libtiff-develamazon-linux-2023-upgrade-libtiff-staticamazon-linux-2023-upgrade-libtiff-toolsamazon-linux-2023-upgrade-libtiff-tools-debuginfo | Feb 17, 2025 | Jul 19, 2024 | |
| Debian | debian-upgrade-tiff | Jan 13, 2025 | Aug 12, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libtiff | Nov 11, 2024 | Aug 12, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libtiff | Oct 9, 2024 | Aug 12, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libtiff | Nov 5, 2024 | Aug 12, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libtiff | Nov 11, 2024 | Aug 12, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-libtifforacle-linux-upgrade-libtiff-develoracle-linux-upgrade-libtiff-tools | Nov 11, 2024 | Jul 19, 2024 |
| Redhat_linux | redhat-upgrade-libtiffredhat-upgrade-libtiff-debuginforedhat-upgrade-libtiff-debugsourceredhat-upgrade-libtiff-develredhat-upgrade-libtiff-toolsredhat-upgrade-libtiff-tools-debuginfo | Sep 6, 2024 | Aug 12, 2024 | |
| Rocky_linux | rocky-upgrade-libtiffrocky-upgrade-libtiff-debuginforocky-upgrade-libtiff-debugsourcerocky-upgrade-libtiff-develrocky-upgrade-libtiff-toolsrocky-upgrade-libtiff-tools-debuginfo | Nov 19, 2024 | Aug 12, 2024 | |
| Suse | — | suse-upgrade-libtiff-develsuse-upgrade-libtiff-devel-32bitsuse-upgrade-libtiff5suse-upgrade-libtiff5-32bitsuse-upgrade-libtiff6suse-upgrade-libtiff6-32bitsuse-upgrade-tiff | Aug 21, 2024 | Aug 12, 2024 |
| Ubuntu | ubuntu-pro-upgrade-libtiff-openglubuntu-pro-upgrade-libtiff-toolsubuntu-pro-upgrade-libtiff5ubuntu-pro-upgrade-libtiffxx5ubuntu-upgrade-libtiff5ubuntu-upgrade-libtiff6 | Sep 10, 2024 | Aug 12, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub