CVE-2018-18557 log

Source
Severity High
Remote Yes
Type Arbitrary code execution
Description 
LibTIFF before 4.0.10 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write.
Group Package Affected Fixed Severity Status Ticket
AVG-791 lib32-libtiff 4.0.9-1 4.0.10-1 High Fixed FS#60599
AVG-790 libtiff 4.0.9-2 4.0.10-1 High Fixed FS#60599
Date Advisory Group Package Severity Type
20 Nov 2018 ASA-201811-18 AVG-791 lib32-libtiff High multiple issues
20 Nov 2018 ASA-201811-17 AVG-790 libtiff High multiple issues
References 
https://bugs.chromium.org/p/project-zero/issues/detail?id=1697
https://gitlab.com/libtiff/libtiff/merge_requests/38
https://gitlab.com/libtiff/libtiff/commit/681748ec2f5ce88da5f9fa6831e1653e46af8a66