CVE-2024-7006

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-7006
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7006.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-7006
Downstream
AZL (4)
BELL (1)
CGA (2)
CLSA (2)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (5)
openSUSE (1)
RHSA (3)
RLSA (2)
SUSE (6)
UBUNTU (1)
Related
ALSA (2)
CGA (1)
openSUSE (1)
SUSE (6)
Published
2024-08-08T20:49:45Z
Modified
2026-08-12T03:51:20Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Libtiff: null pointer dereference in tif_dirinfo.c
Details

A null pointer dereference flaw was found in Libtiff via tif_dirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-476"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7006.json"
}
References

Affected packages

Git / gitlab.com/libtiff/libtiff

Affected ranges

Type
GIT
Repo
https://gitlab.com/libtiff/libtiff
Events
Introduced
00c28dda69f1be886da146b085f795478d661ddf
Last Affected
8b20804fc0ddeaa93667b799b5e1a2a7dc9e3fb2
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "3.5.1"
        },
        {
            "last_affected":  "4.6.0"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7006.json"