medium6.5
CVE-2020-19144
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
Impact
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplesystems | Libtiff | Version 4.0.10 |
| Debian | Debian Linux | Version 9.0 |
| Netapp | Ontap Select Deploy Administration Utility | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugzilla.maptools.org/show_bug.cgi?id=2852
- https://gitlab.com/libtiff/libtiff/-/issues/159
- https://lists.debian.org/debian-lts-announce/2021/10/msg00004.html
- https://security.netapp.com/advisory/ntap-20211004-0005/
- http://bugzilla.maptools.org/show_bug.cgi?id=2852
- https://gitlab.com/libtiff/libtiff/-/issues/159
- https://lists.debian.org/debian-lts-announce/2021/10/msg00004.html
- https://security.netapp.com/advisory/ntap-20211004-0005/