Red Hat Security Advisory

RHSA-2020:1688

libtiff security update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) libtiff-tools-4.0.9-17.el8
Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-17.el8, libtiff-devel-4.0.9-17.el8

Fixes 1 record

TI-2019-11166 CVE-2019-14973 · GHSA-2586-jx35-m7r7

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle…

LOW 36

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04204 Published 2019-08-14 Partial fix CWE-190