Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-4244
6.8
MEDIUMCVSS v2
Published
September 28, 2013
Affected
4 projects
Assigned by
Red Hat
Severity scale
010
Description
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
libtiff/libtiffGitLabTIFF Library and Utilities
GitLabTIFF Library and Utilities= 3.4, = 3.7.0, = 4.0, = 3.6.0, = 3.6.1, = 3.8.0, <= 4.0.3, = 3.7.3, = 3.7.2, = 3.9.3, = 3.5.7, = 3.9.5, = 3.8.2, = 3.8.1, = 4.0.2, = 3.9.2, = 3.9.1, = 3.9.0, = 3.5.6, = 3.9.2-5.2.1, = 3.7.4, = 3.5.1, = 3.9.4, = 3.5.3, = 3.5.2, = 4.0.1, = 3.9, = 3.7.1, = 3.5.5, = 3.5.4NVD
rzkn/libtiffGitLab
GitLab= 3.4, = 3.7.0, = 4.0, = 3.6.0, = 3.6.1, = 3.8.0, <= 4.0.3, = 3.7.3, = 3.7.2, = 3.9.3, = 3.5.7, = 3.9.5, = 3.8.2, = 3.8.1, = 4.0.2, = 3.9.2, = 3.9.1, = 3.9.0, = 3.5.6, = 3.9.2-5.2.1, = 3.7.4, = 3.5.1, = 3.9.4, = 3.5.3, = 3.5.2, = 4.0.1, = 3.9, = 3.7.1, = 3.5.5, = 3.5.4NVD
GitHub