[SECURITY] Fedora 39 Update: freeimage-3.19.0-0.19.svn1909.fc39

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

Updated libtiff packages fix security vulnerability

A null pointer dereference issue was found in Libtiff's tifdir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial o...

MGASA-2023-0255 Updated libtiff packages fix security vulnerability

A null pointer dereference issue was found in Libtiff's tifdir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial o...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3488) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3488 in the libtiff library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tiffcrop utility in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to cause service failures...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3724) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3724 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _TIFFmemcpy function in the libtiff library, which allows a hacker to cause a service failure

The vulnerability of the TIFFmemcpy function in the libtiff library is related to writing beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

OESA-2023-1599 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

Amazon Linux 2 : libtiff (ALAS-2023-2236)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2236 advisory. 2023-11-29: CVE-2023-0804 was added to this advisory. 2023-11-29: CVE-2023-0802 was added to this advisory. LibTIFF 4.4.0...

Oracle Linux 8 : libtiff (ELSA-2019-3419)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3419 advisory. - Fix DIVIDEBYZERO in patch for CVE-2018-12900 1595579 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : GNOME (ELSA-2019-3553)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3553 advisory. - CVE-2019-12795 Check that the connecting client is the same user 1729885 - CVE-2019-3827: Prevent access if any authentication agent isnt available...

The vulnerability of the TIFFReadDirectory function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFReadDirectory function in the LibTIFF library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oracle Linux 7 : poppler / and / evince (ELSA-2020-1074)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1074 advisory. evince 3.28.2-9 - Handle failure from TIFFReadRGBAImageOriented - Resolves: 1717352 poppler 0.26.5-42 - Fix potential integer overflow and check length...

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...

Oracle Linux 6 : qt (ELSA-2011-1328)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1328 advisory. - Resolves: rhbz737813 fix multiple flaws in Qt CVE-2011-3193, CVE-2011-3194 Tenable has extracted the preceding description block directly from the...

Crash when processing crafted TIFF files

Disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

GHSA-Q7PP-WCGR-PFFX Crash when processing crafted TIFF files

Disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

DEBIAN-CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

Design/Logic Flaw

DISPUTED disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security...