Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-7006
HistoryAug 12, 2024 - 12:00 a.m.

CVE-2024-7006

2024-08-1200:00:00
ubuntu.com
ubuntu.com
3
cve-2024-7006
tif_dirinfo.c
texmaker
libtiff
bionic
embedded copy
null pointer dereference

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

19.6%

A null pointer dereference flaw was found in Libtiff via tif_dirinfo.c.
This issue may allow an attacker to trigger memory allocation failures
through certain means, such as restricting the heap space size or injecting
faults, causing a segmentation fault. This can cause an application crash,
eventually leading to a denial of service.

Bugs

Notes

Author Note
sbeattie texmaker added an embedded copy of libtiff in bionic

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

19.6%