Remote Yes

Type Denial of service

Description

A null pointer dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF before 4.0.10 when using the tiffinfo tool to print crafted TIFF information.

AVG-813 libtiff 4.0.9-1 4.0.9-2 High Fixed

AVG-791 lib32-libtiff 4.0.9-1 4.0.10-1 High Fixed FS#60599

20 Nov 2018 ASA-201811-18 AVG-791 lib32-libtiff High multiple issues

https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b

This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.