PublicDateAtUSN: 2016-11-22
Candidate: CVE-2016-9535
PublicDate: 2016-11-22 19:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9535
 https://ubuntu.com/security/notices/USN-3212-1
Description:
 tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can
 lead to assertion failures in debug mode, or buffer overflows in release
 mode, when dealing with unusual tile size like YCbCr with subsampling.
 Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."
Ubuntu-Description:
Notes:
 mdeslaur> this will not be fixed in precise/esm
Bugs:
Priority: medium
Discovered-by: Axel Souchet and Vishal Chauhan
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]

Patches_tiff:
 upstream: https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1
 upstream: https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33
upstream_tiff: released (4.0.7-1)
precise_tiff: ignored (reached end-of-life)
precise/esm_tiff: ignored
trusty_tiff: released (4.0.3-7ubuntu0.6)
trusty/esm_tiff: released (4.0.3-7ubuntu0.6)
vivid/stable-phone-overlay_tiff: ignored (reached end-of-life)
vivid/ubuntu-core_tiff: DNE
xenial_tiff: released (4.0.6-1ubuntu0.1)
esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.1)
yakkety_tiff: released (4.0.6-2ubuntu0.1)
zesty_tiff: not-affected (4.0.7-1)
artful_tiff: not-affected (4.0.7-1)
devel_tiff: not-affected (4.0.7-1)