Skip to content
OpenAdvisories
Low ALAS2-2019-1345 1 CVE

Low: compat-libtiff3 security update (Amazon Linux 2)

Published Nov 4, 2019 · Updated Nov 7, 2019

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7456: A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.) 99999: CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 compat-libtiff3 0:3.9.4-12.amzn2
Amazon Linux · 2 compat-libtiff3-debuginfo 0:3.9.4-12.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-7456.html