tocsin

Debian/tiff: medium 6.5

LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file.

Action: Upgrade tiff to 4.0.8-2 or later.

Affected

introducedfixedlast affected
04.0.8-2-

Fixed versions

4.0.8-2

Sources

published · modified · JSON