p PatchFirst

CVE-2006-2024

CVE-2006-2024

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

EPSS 8.9% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tiff Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.8.1

    Update to 3.8.1

  • tiff Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.8.1

    Update to 3.8.1

  • tiff Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.8.1

    Update to 3.8.1

Original sources

Check your server →