Summary
USN-6997-1 fixed a vulnerability in LibTIFF. This update
provides the corresponding update for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that LibTIFF incorrectly handled memory. An attacker
could possibly use this issue to cause the application to crash, resulting
in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | tiff | 4.0.3-7ubuntu0.11+esm14 |
Vulnerabilities 1
-
High 7.5
Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. …
References
-
report
https://ubuntu.com/security/CVE-2024-7006