Summary
[4.0.9-33]
- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52927)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libtiff | 0:4.0.9-33.el8_10 |
| Oracle Linux · 8 | libtiff-devel | 0:4.0.9-33.el8_10 |
| Oracle Linux · 8 | libtiff-tools | 0:4.0.9-33.el8_10 |
Vulnerabilities 1
-
High 7.5
Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. …