Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 20.04 LTS 5084-1 Critical: LibTIFF Denial Of Service

ubuntu
Calendar Grey September 21, 2021
Dist Ubuntu Esm H88
A flaw in the TIFF format may cause system failures or allow unauthorized control of Ubuntu platforms. It is recommended to apply updates to protect software.
LibTIFF could be made to crash or run programs if it opened a specially crafted file.

Summary

LibTIFF could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- tiff: Tag Image File Format (TIFF) library

Details:

It was discovered that LibTIFF incorrectly handled certain malformed

images. If a user or automated system were tricked into opening a specially

crafted image, a remote attacker could crash the application, leading to a

denial of service, or possibly execute arbitrary code with user privileges.

Topics%20covered

Topics Covered

security advisory denial of service critical remote execution ubuntu tiff

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  libtiff-tools                   4.1.0+git191117-2ubuntu0.20.04.2
  libtiff5                        4.1.0+git191117-2ubuntu0.20.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5084-1

CVE-2020-19143

Severity
critical
Lowest
Low
Medium
High
Critical

September 21, 2021

Topics%20covered

Topics Covered

security advisory denial of service critical remote execution ubuntu tiff

Package Information

https://launchpad.net/ubuntu/+source/tiff/4.1.0+git191117-2ubuntu0.20.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.