Summary
[4.4.0-12.1]
- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libtiff | 0:4.4.0-12.el9_4.1 |
| Oracle Linux · 9 | libtiff-devel | 0:4.4.0-12.el9_4.1 |
| Oracle Linux · 9 | libtiff-tools | 0:4.4.0-12.el9_4.1 |
Vulnerabilities 1
-
High 7.5
Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. …