Description
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
libtiff
Default version status: unknown
4.4.0unaffected4.0.9unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.0.9-33.el8_10 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:4.4.0-12.el9_4.1 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:4.4.0-8.el9_2.1 to < *unaffected
Red Hat Red Hat Enterprise Linux 10
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 6
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
References
- https://access.redhat.com/errata/RHSA-2024:6360 ↗
- https://access.redhat.com/errata/RHSA-2024:8833 ↗
- https://access.redhat.com/errata/RHSA-2024:8914 ↗
- https://access.redhat.com/security/cve/CVE-2024-7006 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2302996 ↗
- https://security.netapp.com/advisory/ntap-20240920-0001/ ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html ↗