CVE-2019-17546
CVE-2019-17546
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
CVSS 8.8 · High · EPSS 3.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
gdal Debian:12
- Affected ranges
- ECOSYSTEM: < 3.1.0+dfsg-1
Update to 3.1.0+dfsg-1
gdal Debian:13
- Affected ranges
- ECOSYSTEM: < 3.1.0+dfsg-1
Update to 3.1.0+dfsg-1
gdal Debian:14
- Affected ranges
- ECOSYSTEM: < 3.1.0+dfsg-1
Update to 3.1.0+dfsg-1
tiff Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.10+git190818-1
Update to 4.0.10+git190818-1
tiff Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.10+git190818-1
Update to 4.0.10+git190818-1
tiff Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.10+git190818-1
Update to 4.0.10+git190818-1
gdal Ubuntu:Pro:14.04:LTS
- Versions
- 1.9.0-3.1ubuntu4
- 1.9.0-3.1ubuntu6
- 1.10.1+dfsg-2
- 1.10.1+dfsg-2build1
- 1.10.1+dfsg-3
- 1.10.1+dfsg-3build1
- 1.10.1+dfsg-3build2
- 1.10.1+dfsg-3ubuntu1
- 1.10.1+dfsg-3ubuntu2
- 1.10.1+dfsg-5ubuntu1
- Affected ranges
- ECOSYSTEM: < 1.10.1+dfsg-5ubuntu1+esm1
Update to 1.10.1+dfsg-5ubuntu1+esm1
tiff Ubuntu:Pro:14.04:LTS
- Versions
- 4.0.2-4ubuntu3
- 4.0.3-5ubuntu1
- 4.0.3-6
- 4.0.3-6ubuntu1
- 4.0.3-7
- 4.0.3-7ubuntu0.1
- 4.0.3-7ubuntu0.2
- 4.0.3-7ubuntu0.3
- 4.0.3-7ubuntu0.4
- 4.0.3-7ubuntu0.6
- 4.0.3-7ubuntu0.7
- 4.0.3-7ubuntu0.8
- 4.0.3-7ubuntu0.9
- 4.0.3-7ubuntu0.10
- 4.0.3-7ubuntu0.11
- 4.0.3-7ubuntu0.11+esm1
- 4.0.3-7ubuntu0.11+esm2
- 4.0.3-7ubuntu0.11+esm3
- 4.0.3-7ubuntu0.11+esm4
- 4.0.3-7ubuntu0.11+esm5
- Affected ranges
- ECOSYSTEM: < 4.0.3-7ubuntu0.11+esm6
Update to 4.0.3-7ubuntu0.11+esm6
tiff Ubuntu:16.04:LTS
- Versions
- 4.0.3-12.3ubuntu2
- 4.0.5-1
- 4.0.6-1
- 4.0.6-1ubuntu0.1
- 4.0.6-1ubuntu0.2
- 4.0.6-1ubuntu0.3
- 4.0.6-1ubuntu0.4
- 4.0.6-1ubuntu0.5
- 4.0.6-1ubuntu0.6
- Affected ranges
- ECOSYSTEM: < 4.0.6-1ubuntu0.7
Update to 4.0.6-1ubuntu0.7
gdal Ubuntu:Pro:16.04:LTS
- Versions
- 1.11.2+dfsg-3ubuntu3
- 1.11.2+dfsg-3ubuntu4
- 1.11.3+dfsg-2build1
- 1.11.3+dfsg-2build2
- 1.11.3+dfsg-2build3
- 1.11.3+dfsg-3
- 1.11.3+dfsg-3build1
- 1.11.3+dfsg-3build2
- 1.11.3+dfsg-3ubuntu0.1~esm1
- 1.11.3+dfsg-3ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2-2build1
- 5.5.1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tiff Ubuntu:18.04:LTS
- Versions
- 4.0.8-5
- 4.0.8-6
- 4.0.9-1
- 4.0.9-2
- 4.0.9-3
- 4.0.9-4
- 4.0.9-4ubuntu1
- 4.0.9-5
- 4.0.9-5ubuntu0.1
- 4.0.9-5ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 4.0.9-5ubuntu0.3
Update to 4.0.9-5ubuntu0.3
neuron Ubuntu:18.04:LTS
- Versions
- 7.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:18.04:LTS
- Versions
- 5.9.1-1
- 5.9.2-1
- 5.9.2-2
- 5.9.3-1ubuntu1
- 5.9.4-0ubuntu1
- 5.9.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
neuron Ubuntu:20.04:LTS
- Versions
- 7.6.3-1build2
- 7.6.3-1build3
- 7.6.3-1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:20.04:LTS
- Versions
- 5.12.4-1
- 5.12.5-1
- 5.12.5-1build1
- 5.12.8-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
neuron Ubuntu:22.04:LTS
- Versions
- 7.6.3-1build5
- 7.6.3-1build6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:22.04:LTS
- Versions
- 5.15.2-2
- 5.15.2-2build1
- 5.15.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.6+dfsg-1
- 5.15.6+dfsg-2
- 5.15.7+dfsg-2
- 5.15.8+dfsg-1
- 5.15.8+dfsg-1build1
- 5.15.8+dfsg-1build2
- 5.15.8+dfsg-2
- 5.15.9+dfsg-1
- 5.15.9+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/OSGeo/gdal/commit/21674033ee246f698887604c7af7ba1962a40ddf
- https://gitlab.com/libtiff/libtiff/commit/4bb584a35f87af42d6cf09d15e9ce8909a839145
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16443
- https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html
- https://seclists.org/bugtraq/2020/Jan/32
- https://www.debian.org/security/2020/dsa-4608
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LM5ZW7E3IEW7LT2BPJP7D3RN6OUOE3MX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3S4WNIMZ7XSLY2LD5FPRPZMGNUBVKOG/
- https://security.gentoo.org/glsa/202003-25
- https://lists.debian.org/debian-lts-announce/2020/03/msg00020.html
- https://www.debian.org/security/2020/dsa-4670
- https://security.netapp.com/advisory/ntap-20241220-0007/
- https://nvd.nist.gov/vuln/detail/CVE-2019-17546