Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2016-734
HistoryAug 17, 2016 - 1:30 p.m.

Important: compat-libtiff3

2016-08-1713:30:00
alas.aws.amazon.com
43

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.057

Percentile

93.4%

JSON

Issue Overview:

Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files. (CVE-2014-9655, CVE-2015-1547, CVE-2015-8784, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2016-3990, CVE-2016-5320)

Affected Packages:

compat-libtiff3

Issue Correction:
Run yum update compat-libtiff3 to update your system.

New Packages:

i686:  
    compat-libtiff3-3.9.4-18.14.amzn1.i686  
    compat-libtiff3-debuginfo-3.9.4-18.14.amzn1.i686  
  
src:  
    compat-libtiff3-3.9.4-18.14.amzn1.src  
  
x86_64:  
    compat-libtiff3-3.9.4-18.14.amzn1.x86_64  
    compat-libtiff3-debuginfo-3.9.4-18.14.amzn1.x86_64

Additional References

Red Hat: CVE-2014-9655, CVE-2015-1547, CVE-2015-8665, CVE-2015-8683, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2015-8784, CVE-2016-3990, CVE-2016-5320

Mitre: CVE-2014-9655, CVE-2015-1547, CVE-2015-8665, CVE-2015-8683, CVE-2015-8781, CVE-2015-8782, CVE-2015-8783, CVE-2015-8784, CVE-2016-3990, CVE-2016-5320

Related

nessus 50
openvas 33
debian 8
ubuntu 1
cloudfoundry 1
osv 6
f5 6
mageia 2
centos 2
ibm 3
redhat 2
oraclelinux 2
amazon 2
ubuntucve 9
cvelist 10
prion 10
nvd 10
fedora 4
debiancve 9
cve 10
veracode 9
freebsd 3
securityvulns 2
alpinelinux 1
redhatcve 2
gentoo 1
slackware 1
nessus
nessus
Amazon Linux AMI : compat-libtiff3 (ALAS-2016-734)
2016-08-18 00:00:00
Debian DSA-3467-1 : tiff - security update
2016-02-08 00:00:00
Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2939-1)
2016-03-24 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2016-734)
2016-10-26 00:00:00
Ubuntu: Security Advisory (USN-2939-1)
2016-03-24 00:00:00
Debian Security Advisory DSA 3467-1 (tiff - security update)
2016-02-06 00:00:00
debian
debian
[SECURITY] [DSA 3467-1] tiff security update
2016-02-06 07:39:28
[SECURITY] [DSA 3467-1] tiff security update
2016-02-06 07:39:28
[SECURITY] [DLA 405-1] tiff security update
2016-01-30 13:24:07
ubuntu
ubuntu
LibTIFF vulnerabilities
2016-03-23 00:00:00
cloudfoundry
cloudfoundry
USN-2939-1 LibTIFF vulnerabilities | Cloud Foundry
2016-03-24 00:00:00
osv
osv
tiff - security update
2016-01-30 00:00:00
tiff3 - security update
2017-03-30 00:00:00
tiff - security update
2016-01-26 00:00:00
f5
f5
K35155453 : Multiple LibTIFF vulnerabilities
2016-11-08 00:00:00
SOL35155453 - Multiple LibTIFF vulnerabilities
2016-11-08 00:00:00
K89096577 : LibTIFF vulnerabilities CVE-2016-5314 and CVE-2015-8784
2016-11-08 00:00:00
mageia
mageia
Updated libtiff package fixes security vulnerabilities
2016-01-14 04:44:39
Updated libtiff packages fix security vulnerabilities
2015-03-23 00:42:09
centos
centos
libtiff security update
2016-08-02 21:57:58
libtiff security update
2016-08-02 15:06:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in libtiff affect PowerKVM
2018-06-18 01:33:05
Security Bulletin: Libtiff vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in tiff affect IBM Flex System Manager(FSM)
2018-06-18 01:32:21
redhat
redhat
(RHSA-2016:1547) Important: libtiff security update
2016-08-02 14:27:54
(RHSA-2016:1546) Important: libtiff security update
2016-08-02 14:26:49
oraclelinux
oraclelinux
libtiff security update
2016-08-02 00:00:00
libtiff security update
2016-08-02 00:00:00
amazon
amazon
Important: libtiff
2016-08-17 13:30:00
Medium: libtiff
2015-06-22 15:07:00
ubuntucve
ubuntucve
CVE-2015-8683
2015-12-31 00:00:00
CVE-2015-8783
2016-02-01 00:00:00
CVE-2015-8781
2016-02-01 00:00:00
cvelist
cvelist
CVE-2015-8782
2016-02-01 21:00:00
CVE-2015-8781
2016-02-01 21:00:00
CVE-2015-8665
2016-04-13 17:00:00
prion
prion
Out-of-bounds
2016-02-01 21:59:00
Out-of-bounds
2016-02-01 21:59:00
Code injection
2016-04-13 17:59:00
nvd
nvd
CVE-2015-8781
2016-02-01 21:59:01
CVE-2015-8782
2016-02-01 21:59:02
CVE-2015-8665
2016-04-13 17:59:04
fedora
fedora
[SECURITY] Fedora 22 Update: libtiff-4.0.3-20.fc22
2015-06-02 15:14:07
[SECURITY] Fedora 21 Update: libtiff-4.0.3-20.fc21
2015-05-30 15:55:39
[SECURITY] Fedora 21 Update: mingw-libtiff-4.0.3-6.fc21
2015-05-04 15:24:27
debiancve
debiancve
CVE-2015-8781
2016-02-01 21:59:01
CVE-2015-8782
2016-02-01 21:59:02
CVE-2015-8665
2016-04-13 17:59:04
cve
cve
CVE-2015-8781
2016-02-01 21:59:01
CVE-2015-8782
2016-02-01 21:59:02
CVE-2015-8665
2016-04-13 17:59:04
veracode
veracode
Denial Of Service (DoS)
2018-08-01 06:37:08
Denial Of Service (DoS)
2019-05-02 05:45:56
Denial Of Service (DoS)
2018-08-01 03:24:51
freebsd
freebsd
tiff -- out-of-bounds read in tif_getimage.c
2015-12-24 00:00:00
tiff -- out-of-bounds read in CIE Lab image format
2015-12-25 00:00:00
tiff -- buffer overflow
2016-06-28 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:147-1 ] libtiff
2015-04-13 00:00:00
LibTIFF multiple security vulnerabilities
2015-04-13 00:00:00
alpinelinux
alpinelinux
CVE-2016-5320
2018-03-12 02:29:00
redhatcve
redhatcve
CVE-2016-5320
2016-06-15 08:18:35
CVE-2016-5875
2016-10-28 07:47:23
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2017-01-09 00:00:00
slackware
slackware
[slackware-security] libtiff
2017-04-08 20:11:36

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.057

Percentile

93.4%

JSON
Related for ALAS-2016-734
nessus50openvas33debian8ubuntu1cloudfoundry1osv6f56mageia2centos2ibm3redhat2oraclelinux2amazon2ubuntucve9cvelist10prion10nvd10fedora4debiancve9cve10veracode9freebsd3securityvulns2alpinelinux1redhatcve2gentoo1slackware1