Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID:CVE-2022-2953 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905. By...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1675)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-3429 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: The issue is related to a NULL pointer dereference flaw in the LZWDecode function, located in the libtiff/tif lzw.c file. This flaw can be exploited by a local attacker who crafts specific...

Out-of-bounds Read

libtiff.so is vulnerable to Out-of-bounds Read. The vulnerability exists due to a heap based buffer overflow in extractImageSection function in tiffcrop.c which allows an attacker to submit a malicious code file into the system and perform out of read...

SUSE CVE-2023-30775

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

SUSE CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

A flaw was found in tiffcrop a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

...

CVE-2023-30775

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

PT-2023-3451 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: libtiff affected versions not specified Description: The issue is related to a heap buffer overflow in the libtiff library when processing the TIFFTAG INKNAMES and TIFFTAG NUMBEROFINKS parameters. This can lead to a denial of service or...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the presence of a buffer overflow vulnerability...

PT-2023-3450 · Libtiff +5 · Libtiff +5

Name of the Vulnerable Software and Affected Versions: libtiff affected versions not specified Description: A security flaw in the libtiff library causes a heap buffer overflow in the extractContigSamples32bits function, located in tiffcrop.c. This issue can be exploited by an attacker using...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the presence of a buffer overflow vulnerability...

CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1

CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2869 affecting package libtiff for versions less than 4.5.0-1

CVE-2022-2869 affecting package libtiff for versions less than 4.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-4645 affecting package libtiff for versions less than 4.5.0-1

CVE-2022-4645 affecting package libtiff for versions less than 4.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2868 affecting package libtiff for versions less than 4.5.0-1

CVE-2022-2868 affecting package libtiff for versions less than 4.5.0-1. An upgraded version of the package is available that resolves this issue...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2023-1599)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1599)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...