A flaw was found in LibTIFF 3.8.2TIFF. The ClientOpen function in tif_unix.c file has memory leaks which allow local attackers to cause a denial of service (memory consumption) via crafted file.
Created libtiff tracking bugs for this issue:
Affects: fedora-all [bug 1577316]
Created mingw-libtiff tracking bugs for this issue:
Affects: epel-7 [bug 1577314]
Affects: fedora-all [bug 1577315]
In bmp2tiff tool a file is opened for writing with TIFFOpen, but when the iBitCount header value is wrong, the tool exits without closing the file.