CVE-2017-7597

Name	CVE-2017-7597
Description	tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-911-1, DLA-912-1, DSA-3844-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
tiff (PTS)	bookworm, bookworm (security)	4.5.0-6+deb12u4	fixed
	trixie	4.7.0-3+deb13u2	fixed
	trixie (security)	4.7.0-3+deb13u3	fixed
	forky, sid	4.7.2-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
tiff	source	wheezy	4.0.2-6+deb7u12	DLA-911-1
tiff	source	jessie	4.0.3-12.3+deb8u3	DSA-3844-1
tiff	source	(unstable)	4.0.7-6
tiff3	source	wheezy	3.9.6-11+deb7u5	DLA-912-1
tiff3	source	(unstable)	(unfixed)

Notes

https://github.com/vadz/libtiff/commit/3144e57770c1e4d26520d8abee750f8ac8b75490
https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes