AVG-886

Package libtiff
Status Vulnerable
Severity Medium
Type multiple issues
Affected 4.0.10-1
Fixed 4.0.10-2
Current 4.0.10-1 [extra]
Ticket Create
Created Mon Feb 11 22:26:33 2019
Issue Severity Remote Type Description
CVE-2019-7663 Medium Yes Denial of service
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the...
CVE-2019-6128 Medium Yes Information disclosure
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.