tocsin

Alpine/tiff: medium 6.5

In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not check

Action: Upgrade tiff to 4.0.9-r6 or later.

Affected

introducedfixedlast affected
04.0.9-r6-

Fixed versions

4.0.9-r6

Sources

published · modified · JSON