tocsin

Alpine/tiff: medium 5.5

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

Action: Upgrade tiff to 4.0.7-r2 or later.

Affected

introducedfixedlast affected
04.0.7-r2-

Fixed versions

4.0.7-r2

Sources

published · modified · JSON