AVG-886 log
| Package | libtiff |
| Status | Fixed |
| Severity | Medium |
| Type | denial of service |
| Affected | 4.0.10-1 |
| Fixed | 4.1.0-1 |
| Current | 4.6.0-4 [extra] |
| Ticket | None |
| Created | Mon Feb 11 22:26:33 2019 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2019-7663 | Medium | Yes | Denial of service | An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the... |
| CVE-2019-6128 | Medium | Yes | Denial of service | The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb. |
| Date | Advisory | Package | Type |
|---|---|---|---|
| 13 Nov 2019 | ASA-201911-13 | libtiff | denial of service |