Debian/tiff: high 8.8
LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff.
Action: Upgrade tiff to 4.0.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.7-1 | - |
Fixed versions
| 4.0.7-1 |
Sources
published · modified · JSON