This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-10269 →
DEBIAN-CVE-2016-10269
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attacker...
Original description
The description as published by the source.
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
Debian:13
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
Debian:14
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
References
- advisory security-tracker.debian.org