CVE-2024-6716
Publication date 15 July 2024
Last updated 6 September 2024
Ubuntu priority
Rejected reason: Invalid security issue.
Read the notes from the security team
Why is this CVE low priority?
Only a resource consumption DoS via API misuse
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| gdal | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal |
Not affected
|
|
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| 14.04 LTS trusty |
Needs evaluation
|
|
| neuron | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| qtwebengine-opensource-src | 24.04 LTS noble |
Needs evaluation
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| texmaker | 24.04 LTS noble |
Needs evaluation
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| tiff | 24.04 LTS noble |
Vulnerable, fix deferred
|
| 22.04 LTS jammy |
Vulnerable, fix deferred
|
|
| 20.04 LTS focal |
Vulnerable, fix deferred
|
|
| 18.04 LTS bionic |
Vulnerable, fix deferred
|
|
| 16.04 LTS xenial |
Vulnerable, fix deferred
|
|
| 14.04 LTS trusty |
Vulnerable, fix deferred
|
Notes
sbeattie
texmaker added an embedded copy of libtiff in bionic
mdeslaur
Per the tiff developers, this API can't perform restrictions on imagewidth and imagelength, as high values are also valid. Application developers should be using the TIFFOpenOptionsSetMaxSingleMemAlloc() API. The upstream bug is likely to get closed, and this CVE rejected. Marking as deferred for now.