Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7456: A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.) 99999: CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | compat-libtiff3 | 0:3.9.4-12.amzn2 |
| Amazon Linux · 2 | compat-libtiff3-debuginfo | 0:3.9.4-12.amzn2 |
Vulnerabilities 1
-
Unscored —
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-7456.html