UBUNTU-CVE-2020-19143

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the component 'libtiff/tif_dir.c'.

References

Affected packages

Ubuntu:20.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.1.0+git191117-2ubuntu0.20.04.2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.0+git191117-2ubuntu0.20.04.2

Affected versions

4.*

4.0.10+git191003-1

4.1.0+git191117-1

4.1.0+git191117-2

4.1.0+git191117-2build1

4.1.0+git191117-2ubuntu0.20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libtiff-dev",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        },
        {
            "binary_name": "libtiff-opengl",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        },
        {
            "binary_name": "libtiff-tools",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        },
        {
            "binary_name": "libtiff5",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        },
        {
            "binary_name": "libtiff5-dev",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        },
        {
            "binary_name": "libtiffxx5",
            "binary_version": "4.1.0+git191117-2ubuntu0.20.04.2"
        }
    ],
    "availability": "No subscription required"
}