CVE-2024-7006 — Libtiff: null pointer dereference in tif_dirinfo.c

Affected: libtiff, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

USN-6997-1 — tiff vulnerability

Affected: Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff, Ubuntu:24.04:LTS: tiff

It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service.

Most recent entries from all

CVE-2024-7006 — Libtiff: null pointer dereference in tif_dirinfo.c

USN-6997-1 — tiff vulnerability