Lucene search

K
oraclelinuxOracleLinuxELSA-2017-0225
HistoryFeb 01, 2017 - 12:00 a.m.

libtiff security update

2017-02-0100:00:00
linux.oracle.com
29

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.3%

[3.9.4-21]

  • Fix patch for CVE-2016-5652
  • Related: #1412078
    [3.9.4-20]
  • Fix CWE-476 defect found by covscan
  • Related: #1412078
    [3.9.4-19]
  • Add patches for CVEs:
  • CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  • CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  • CVE-2016-5652
  • Resolves: #1412078

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.3%