Wind River Support Network

HomeDefectsLIN9-1730

Fixed

LIN9-1730 : Security Advisory - libtiff - CVE-2016-3621

Created: Oct 16, 2016 Updated: May 29, 2018

Resolved Date: Apr 10, 2018

Found In Version: unknown

Fix Version: 9.0.0.5

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the -c lzw option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3621

Other Downloads

Wind River Linux 9.0.0.5

CVEs

CVE-2016-3621