REDHAT-BUG-2302996: Null Pointer Dereference
First published: Mon Aug 05 2024(Updated: )
A null pointer dereference issue was found in Libtiff's tif_dirinfo.c file. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or just injecting faults, which would cause segmentation fault. This may cause an application crash, eventually leading to a denial of service. References: <a href="https://gitlab.com/libtiff/libtiff/-/merge_requests/559">https://gitlab.com/libtiff/libtiff/-/merge_requests/559</a> <a href="https://gitlab.com/libtiff/libtiff/-/issues/624">https://gitlab.com/libtiff/libtiff/-/issues/624</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libtiff |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2302996?
The severity of REDHAT-BUG-2302996 is considered high due to the potential for causing segmentation faults.
How do I fix REDHAT-BUG-2302996?
To fix REDHAT-BUG-2302996, update to the latest version of Libtiff that includes the patch for this issue.
What causes the issue reported in REDHAT-BUG-2302996?
The issue in REDHAT-BUG-2302996 is caused by a null pointer dereference in the tif_dirinfo.c file of Libtiff.
Which software is affected by REDHAT-BUG-2302996?
REDHAT-BUG-2302996 affects the Libtiff library widely used for handling TIFF image files.
What are the potential impacts of REDHAT-BUG-2302996?
The potential impacts of REDHAT-BUG-2302996 include application crashes and the possibility of memory allocation failures.
- agent/severity
- agent/type
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-7006
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libtiff
- canonical/libtiff