Описание
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4.0.7-1 |
| devel | not-affected | 4.0.7-1 |
| esm-infra-legacy/trusty | released | 4.0.3-7ubuntu0.6 |
| esm-infra-legacy/xenial | released | 4.0.6-1ubuntu0.1 |
| esm-infra/xenial | released | 4.0.6-1ubuntu0.1 |
| precise | ignored | end of life |
| precise/esm | ignored | |
| trusty | released | 4.0.3-7ubuntu0.6 |
| trusty/esm | released | 4.0.3-7ubuntu0.6 |
| upstream | released | 4.0.7 |
Показывать по
EPSS
6.4 Medium
CVSS2
9.1 Critical
CVSS3
Связанные уязвимости
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in ...
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
EPSS
6.4 Medium
CVSS2
9.1 Critical
CVSS3