This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-7456 →
DEBIAN-CVE-2018-7456
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0al...
Original description
The description as published by the source.
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5"}]}]
Debian:13
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5"}]}]
Debian:14
tiff
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5"}]}]
References
- advisory security-tracker.debian.org