CentOS ProjectCESA-2008:0863libtiff security update
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.6%
CentOS Errata and Security Advisory CESA-2008:0863
The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.
Multiple uses of uninitialized values were discovered in libtiffβs
Lempel-Ziv-Welch (LZW) compression algorithm decoder. An attacker could
create a carefully crafted LZW-encoded TIFF file that would cause an
application linked with libtiff to crash or, possibly, execute arbitrary
code. (CVE-2008-2327)
Red Hat would like to thank Drew Yao of the Apple Product Security team for
reporting this issue.
All libtiff users are advised to upgrade to these updated packages, which
contain backported patches to resolve this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-August/077382.html
https://lists.centos.org/pipermail/centos-announce/2008-August/077383.html
https://lists.centos.org/pipermail/centos-announce/2008-August/077385.html
https://lists.centos.org/pipermail/centos-announce/2008-August/077389.html
Affected packages:
libtiff
libtiff-devel
Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0863
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 3 | i386 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.i386.rpm |
| CentOS | 3 | i386 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.i386.rpm |
| CentOS | 3 | i386 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.i386.rpm |
| CentOS | 3 | x86_64 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.x86_64.rpm |
| CentOS | 3 | x86_64 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.x86_64.rpm |
| CentOS | 3 | ia64 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.ia64.rpm |
| CentOS | 3 | ia64 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.ia64.rpm |
| CentOS | 3 | s390 | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.s390.rpm |
| CentOS | 3 | s390 | libtiff-devel | <Β 3.5.7-31.el3 | libtiff-devel-3.5.7-31.el3.s390.rpm |
| CentOS | 3 | s390x | libtiff | <Β 3.5.7-31.el3 | libtiff-3.5.7-31.el3.s390x.rpm |
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.6%