Updated libtiff packages fix security vulnerabilities

🗓️ 29 Dec 2018 23:24:32Reported by Gentoo FoundationType

Updated libtiff packages fix security vulnerabilities. Heap-based buffer overflows and NULL pointer dereference in LibTIFF 4.0.9 allow remote attackers to cause denial of service or unspecified impact via crafted TIFF files

Reporter	Title	Published	Views	Family All 233
0day.today	libtiff 4.0.9 - Decodes Arbitrarily Sized JBIG into a Target Buffer Exploit	25 Oct 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v	18 Apr 201916:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libTIFF	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package libtiff version 4.1.0-alt1	14 Nov 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1	9 Apr 201900:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : libtiff (ALAS-2019-1327)	25 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libtiff (ALAS-2019-1306)	11 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 8 : libtiff (CESA-2019:3419)	29 Jan 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	6	any	libtiff	4.0.9-1.9	libtiff-4.0.9-1.9.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
debian	www.debian.org/security/2018/dsa-4349
lists	www.lists.opensuse.org/opensuse-updates/2018-11/msg00138.html
lists	www.lists.opensuse.org/opensuse-updates/2018-12/msg00038.html

29 Dec 2018 23:24Current

4.1Medium risk

Vulners AI Score4.1

CVSS 26.8

CVSS 38.8

EPSS0.25183