CVE-2019-7663
CVE-2019-7663
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
CVSS 6.5 · Medium · EPSS 3.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
tiff Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.10-4
Update to 4.0.10-4
tiff Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.10-4
Update to 4.0.10-4
tiff Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.10-4
Update to 4.0.10-4
tiff Ubuntu:14.04:LTS
- Versions
- 4.0.2-4ubuntu3
- 4.0.3-5ubuntu1
- 4.0.3-6
- 4.0.3-6ubuntu1
- 4.0.3-7
- 4.0.3-7ubuntu0.1
- 4.0.3-7ubuntu0.2
- 4.0.3-7ubuntu0.3
- 4.0.3-7ubuntu0.4
- 4.0.3-7ubuntu0.6
- 4.0.3-7ubuntu0.7
- 4.0.3-7ubuntu0.8
- 4.0.3-7ubuntu0.9
- 4.0.3-7ubuntu0.10
- Affected ranges
- ECOSYSTEM: < 4.0.3-7ubuntu0.11
Update to 4.0.3-7ubuntu0.11
gdal Ubuntu:Pro:14.04:LTS
- Versions
- 1.9.0-3.1ubuntu4
- 1.9.0-3.1ubuntu6
- 1.10.1+dfsg-2
- 1.10.1+dfsg-2build1
- 1.10.1+dfsg-3
- 1.10.1+dfsg-3build1
- 1.10.1+dfsg-3build2
- 1.10.1+dfsg-3ubuntu1
- 1.10.1+dfsg-3ubuntu2
- 1.10.1+dfsg-5ubuntu1
- 1.10.1+dfsg-5ubuntu1+esm1
- 1.10.1+dfsg-5ubuntu1+esm2
- 1.10.1+dfsg-5ubuntu1+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tiff Ubuntu:16.04:LTS
- Versions
- 4.0.3-12.3ubuntu2
- 4.0.5-1
- 4.0.6-1
- 4.0.6-1ubuntu0.1
- 4.0.6-1ubuntu0.2
- 4.0.6-1ubuntu0.3
- 4.0.6-1ubuntu0.4
- 4.0.6-1ubuntu0.5
- Affected ranges
- ECOSYSTEM: < 4.0.6-1ubuntu0.6
Update to 4.0.6-1ubuntu0.6
gdal Ubuntu:Pro:16.04:LTS
- Versions
- 1.11.2+dfsg-3ubuntu3
- 1.11.2+dfsg-3ubuntu4
- 1.11.3+dfsg-2build1
- 1.11.3+dfsg-2build2
- 1.11.3+dfsg-2build3
- 1.11.3+dfsg-3
- 1.11.3+dfsg-3build1
- 1.11.3+dfsg-3build2
- 1.11.3+dfsg-3ubuntu0.1~esm1
- 1.11.3+dfsg-3ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2-2build1
- 5.5.1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:16.04:LTS
- Versions
- 4.4.1-1
- 4.4.1-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tiff Ubuntu:18.04:LTS
- Versions
- 4.0.8-5
- 4.0.8-6
- 4.0.9-1
- 4.0.9-2
- 4.0.9-3
- 4.0.9-4
- 4.0.9-4ubuntu1
- 4.0.9-5
- 4.0.9-5ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-5ubuntu0.2
Update to 4.0.9-5ubuntu0.2
qtimageformats-opensource-src Ubuntu:18.04:LTS
- Versions
- 5.9.1-1
- 5.9.2-1
- 5.9.2-2
- 5.9.3-1ubuntu1
- 5.9.4-0ubuntu1
- 5.9.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:20.04:LTS
- Versions
- 5.12.4-1
- 5.12.5-1
- 5.12.5-1build1
- 5.12.8-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:22.04:LTS
- Versions
- 5.15.2-2
- 5.15.2-2build1
- 5.15.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.6+dfsg-1
- 5.15.6+dfsg-2
- 5.15.7+dfsg-2
- 5.15.8+dfsg-1
- 5.15.8+dfsg-1build1
- 5.15.8+dfsg-1build2
- 5.15.8+dfsg-2
- 5.15.9+dfsg-1
- 5.15.9+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:22.04:LTS
- Versions
- 5.0.3-1build8
- 5.0.3-1build9
- 5.0.3-1ubuntu0.22.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:24.04:LTS
- Versions
- 5.15.10-2
- 5.15.12-1
- 5.15.12-1build1
- 5.15.12-1build2
- 5.15.13-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS
- Versions
- 5.15.15+dfsg-2
- 5.15.15+dfsg-2build2
- 5.15.15+dfsg-2ubuntu1
- 5.15.16+dfsg-1
- 5.15.16+dfsg-1ubuntu2
- 5.15.16+dfsg-1ubuntu4
- 5.15.16+dfsg-3
- 5.15.16+dfsg-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:24.04:LTS
- Versions
- 5.1.3+dfsg-1build4
- 5.1.3+dfsg-1build5
- 5.1.3+dfsg-1build6
- 5.1.3+dfsg-1build7
- 5.1.3+dfsg-1build8
- 5.1.3+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:25.10
- Versions
- 5.15.15-3
- 5.15.15-4
- 5.15.17-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://bugzilla.maptools.org/show_bug.cgi?id=2833
- https://usn.ubuntu.com/3906-1/
- https://lists.debian.org/debian-lts-announce/2019/02/msg00026.html
- https://usn.ubuntu.com/3906-2/
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html
- https://gitlab.com/libtiff/libtiff/commit/802d3cbf3043be5dce5317e140ccb1c17a6a2d39
- https://security.gentoo.org/glsa/202003-25
- https://www.debian.org/security/2020/dsa-4670
- https://nvd.nist.gov/vuln/detail/CVE-2019-7663