Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-5784 →
DEBIAN-CVE-2018-5784
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vu...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-4"}]}]
Debian:13
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-4"}]}]
Debian:14
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-4"}]}]
Références
- advisory security-tracker.debian.org