tocsin

Debian/tiff: medium 6.5

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

Action: Upgrade tiff to 4.5.1+git230720-2 or later.

Affected

introducedfixedlast affected
04.5.1+git230720-2-

Fixed versions

4.5.1+git230720-2

Sources

published · modified · JSON