Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-10269 →
DEBIAN-CVE-2016-10269
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attacker...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
Debian:13
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
Debian:14
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-2"}]}]
Références
- advisory security-tracker.debian.org