suse · CVE-2017-17942

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-17942 severity moderate: SUSE including 18 source package names (beta1:libtiff5-4.0.9-44.21.1, libtiff-devel-3.8.2-141.169.22.1, …), 54 product×package rows across 27 product lines (Container caasp/v4/nginx-ingress-controller, Image SLES12-SP5-Azure-SAP-BYOS, … (27 product lines)): Fixed 54.

Description:

In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.