DSA-4670: -1 tiff -- security update
Published Apr 29, 2020
·Updated
Several vulnerabilities have been found in the TIFF library, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.
Affected Software
2 affected components
debian/tiff
debian/tiff
Event History
Apr 29, 2020
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Who is exposed to these issues?
Systems using the Debian TIFF library are exposed when they process malformed image files. The reported impact includes denial of service and possible arbitrary code execution.
2
What does an attacker need to exploit the vulnerabilities?
An attacker needs to cause a vulnerable system to process a malformed TIFF image file. The available information does not specify a particular delivery method or required level of access.