Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-7593

Fixed in a distro release EPSS 2%

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.

Published 2017-04-09 · CVE record · OSV

Products: libtiff

Distro releases

ReleasePackageFixed in
Alpine 3.10tiff4.0.7-r2
Alpine 3.11tiff4.0.7-r2
Alpine 3.12tiff4.0.7-r2
Alpine 3.13tiff4.0.7-r2
Alpine 3.14tiff4.0.7-r2
Alpine 3.15tiff4.0.7-r2
Alpine 3.16tiff4.0.7-r2
Alpine 3.17tiff4.0.7-r2
Alpine 3.18tiff4.0.7-r2
Alpine 3.19tiff4.0.7-r2
Alpine 3.2tiff4.0.7-r2
Alpine 3.20tiff4.0.7-r2
Alpine 3.21tiff4.0.7-r2
Alpine 3.22tiff4.0.7-r2
Alpine 3.23tiff4.0.7-r2
Alpine 3.24tiff4.0.7-r2
Alpine 3.3tiff4.0.7-r2
Alpine 3.4tiff4.0.7-r2
Alpine 3.5tiff4.0.7-r2
Alpine 3.6tiff4.0.7-r2
Alpine 3.7tiff4.0.7-r2
Alpine 3.8tiff4.0.7-r2
Alpine 3.9tiff4.0.7-r2
Arch Linuxlib32-libtiff4.0.7-3
Arch Linuxlibtiff4.0.7-3
Debian 12tiff4.0.7-6
Debian 13tiff4.0.7-6
Debian 14tiff4.0.7-6
Debian 7tiff4.0.2-6+deb7u12
Debian 7tiff33.9.6-11+deb7u5
Debian 8tiff4.0.3-12.3+deb8u3
SUSE Linux Enterprise Desktop 12 SP2tiff4.0.8-44.3.1
SUSE Linux Enterprise Desktop 12 SP3tiff4.0.8-44.3.1
SUSE Linux Enterprise Server 11 SP4tiff3.8.2-141.169.6.1
SUSE Linux Enterprise Server 12 SP2tiff4.0.8-44.3.1
SUSE Linux Enterprise Server 12 SP3tiff4.0.8-44.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2tiff4.0.8-44.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4tiff3.8.2-141.169.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2tiff4.0.8-44.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3tiff4.0.8-44.3.1
SUSE Linux Enterprise Software Development Kit 11 SP4tiff3.8.2-141.169.6.1
SUSE Linux Enterprise Software Development Kit 12 SP2tiff4.0.8-44.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3tiff4.0.8-44.3.1
Ubuntu 14.04 LTStiff4.0.3-7ubuntu0.8
Ubuntu 16.04 LTStiff4.0.6-1ubuntu0.3
openSUSE Tumbleweedtiff4.3.0-1.3