Oval Definition:oval:com.ubuntu.bionic:def:2017145280000000
Revision Date:2017-09-18Version:1
Title:CVE-2017-14528 on Ubuntu 18.04 LTS (bionic) - negligible.
Description:The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-14528
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND imagemagick package in bionic is affected, but a decision has been made to defer addressing it (note: '2020-03-09').
    • BACK