CVE-2020-35523

Name	CVE-2020-35523
Description	An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DSA-4869-1
NVD severity	medium

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
tiff (PTS)	stretch (security), stretch	4.0.8-2+deb9u5	vulnerable
	buster, buster (security)	4.1.0+git191117-2~deb10u2	fixed
	bullseye, sid	4.2.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
tiff	source	buster	4.1.0+git191117-2~deb10u2		DSA-4869-1
tiff	source	(unstable)	4.1.0+git201212-1

Notes

[stretch] - tiff <no-dsa> (can be fixed along in next DLA)
https://gitlab.com/libtiff/libtiff/-/commit/c8d613ef497058fe653c467fc84c70a62a4a71b2
https://gitlab.com/libtiff/libtiff/-/merge_requests/160