Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-14973 →

DEBIAN-CVE-2019-14973

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

Debian:13 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

Debian:14 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

Références

advisory security-tracker.debian.org