120 matches found
Moderate: Red Hat Security Advisory: libtiff security update
An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: null pointer dereference in LZWDecode in libtiff/tiflzw.c CVE-2023-2731 libtiff: tiffcrop: null pointer dereference in TIFFClose CVE-2023-3316 libtiff: memory leak in...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2729)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2760)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-329)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-329 advisory. A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to...
Medium: libtiff
Issue Overview: A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2694)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2652)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6290-1: LibTIFF vulnerabilities
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a...
CVE-2023-2731 affecting package libtiff 4.5.0-2
CVE-2023-2731 affecting package libtiff 4.5.0-2. A patched version of the package is available...
CVE-2023-2731 affecting package libtiff for versions less than 4.5.0-3
CVE-2023-2731 affecting package libtiff for versions less than 4.5.0-3. A patched version of the package is available...
CVE-2023-2731
A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...
CVE-2023-2731
The CVE-2023-2731 issue is a NULL pointer dereference in Libtiff’s LZWDecode() (libtiff/tif_lzw.c). It allows a local attacker to craft input data to cause a crash or denial of service when decompressing TIFF files. Connected advisories confirm libtiff-related fixes and updated packages (e.g., va...
K51272092: MySQL vulnerabilities CVE-2019-2730, CVE-2019-2731, CVE-2019-2737, CVE-2019-2738, and CVE-2019-2739
Security Advisory Description CVE-2019-2730 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with...
SUSE CVE-2013-2731
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...
CVE-2022-2731
creationtimestamp| type| source ---|---|--- 2022-08-09 16:24:38+00:00| seen| https://t.me/cibsecurity/47782...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2731
CVE-2022-2731 is a reflected XSS vulnerability in OpenEMR prior to version 7.0.0.1. Several connected sources confirm the issue affects OpenEMR/OpenEMR installations, with the vulnerability stemming from the backup page’s form_status parameter on interface/main/backup.php. The attack involves inj...
