Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Mageia: 2019-0366 Moderate: libtiff Integer Overflow Threat

mageia
Calendar Grey December 6, 2019
Dist Mageia Esm H88
Recent updates to the libtiff packages address a vulnerability related to integer overflow, impacting multiple software applications. Release date: December 6, 2019.
The updated packages fix a security vulnerability: tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potenti...

Summary

The updated packages fix a security vulnerability:
tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition (CVE-2019-17546).

References

- https://bugs.mageia.org/show_bug.cgi?id=25777

- https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html

- https://www.cve.org/CVERecord?id=CVE-2019-17546

Topics%20covered

Topics Covered

security advisory heap overflow integer overflow libtiff Mageia

Resolution

SRPMS

- 7/core/libtiff-4.1.0-2.git20191120.1.mga7

Publication date: 06 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0366.html
Type: security
CVE: CVE-2019-17546

Topics%20covered

Topics Covered

security advisory heap overflow integer overflow libtiff Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here