Lucene search
+L

7886 matches found

Positive Technologies
Positive Technologies
added 2023/02/12 12:00 a.m.6 views

PT-2023-4911

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be...

6.8CVSS6.6AI score0.00443EPSS
SaveExploits2References135
Positive Technologies
Positive Technologies
added 2023/02/12 12:00 a.m.7 views

PT-2023-4913

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3516, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. Recommendatio...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits1References134
Positive Technologies
Positive Technologies
added 2023/02/12 12:00 a.m.6 views

PT-2023-4912

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3724, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. Recommendatio...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits1References134
Positive Technologies
Positive Technologies
added 2023/02/12 12:00 a.m.8 views

PT-2023-4910

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in tools/tiffcrop.c:3502. This can be exploited to cause a denial-of-service via a crafted tiff file...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits2References135
Positive Technologies
Positive Technologies
added 2023/02/12 12:00 a.m.7 views

PT-2023-4914

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3609, which can be exploited to cause a denial-of-service via a crafted tiff file. This can allow attackers t...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits1References138
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.29 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1363)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

8.8CVSS6.4AI score0.01273EPSS
SaveExploits7References8
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.33 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1391)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

8.8CVSS6.4AI score0.01273EPSS
SaveExploits7References8
OpenVAS
OpenVAS
added 2023/02/10 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01273EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2023/02/10 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1363)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01273EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2023/02/09 12:00 a.m.25 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS7.4AI score0.01085EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
added 2023/02/08 12:00 a.m.37 views

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2023-1326)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

7.7CVSS6.7AI score0.01085EPSS
SaveExploits6References7
Photon
Photon
added 2023/02/08 12:00 a.m.37 views

Important Photon OS Security Update - PHSA-2023-3.0-0528

Updates of 'libtiff', 'u-boot', 'linux-aws', 'redis', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'python3' packages of Photon OS have been released...

6.5CVSS7AI score0.03764EPSS
SaveExploits0
OSV
OSV
added 2023/02/07 12:06 a.m.14 views

MGASA-2023-0038 Updated libtiff packages fix security vulnerability

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image. CVE-2022-48281...

5.5CVSS6AI score0.00443EPSS
SaveExploits1References3
Mageia
Mageia
added 2023/02/07 12:06 a.m.60 views

Updated libtiff packages fix security vulnerability

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image. CVE-2022-48281...

5.5CVSS4.1AI score0.00443EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/02/07 12:00 a.m.3 views

PT-2023-4909 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds read in the tiffcrop utility, located in tools/tiffcrop.c:3701, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This is also...

8.8CVSS6.7AI score0.02187EPSS
SaveExploits55References336
Photon
Photon
added 2023/02/07 12:00 a.m.31 views

Moderate Photon OS Security Update - PHSA-2023-4.0-0328

Updates of 'redis', 'libtiff' packages of Photon OS have been released...

5.5CVSS6AI score0.71984EPSS
SaveExploits1
OSV
OSV
added 2023/02/03 11:05 a.m.2 views

OESA-2023-1047 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

7.5CVSS7.4AI score0.00443EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/02/03 12:00 a.m.23 views

Ubuntu: Security Advisory (USN-5841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.04204EPSS
SaveExploits2References2
CNVD
CNVD
added 2023/02/03 12:00 a.m.32 views

LibTIFF Buffer Overflow Vulnerability (CNVD-2023-29695)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version 4.5.0 and earlier, which stems from a boundary error when handling untrusted...

7AI score0.00443EPSS
SaveExploits1Affected Software1
Ubuntu
Ubuntu
added 2023/02/02 4:34 p.m.89 views

USN-5841-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

8.8CVSS7.6AI score0.04204EPSS
SaveExploits2
Rows per page
Query Builder