PT-2022-6895 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: A flaw in the rotateImage function in the tiffcrop.c file at line 8621 can cause a program crash when reading a crafted input due to a sysmalloc assertion failure. This issue is related to an incorrect...

PT-2022-6894 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: The issue is related to a double free or corruption in the rotateImage function at tiffcrop.c:8839. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availability ...

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

...

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

...

Rocky Linux 8 : libtiff (RLSA-2022:1810)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1810 advisory. - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the invertImage function in the component tiffcrop. CVE-2020-19131 Note th...

Oracle Linux 8 : libtiff (ELSA-2022-1810)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1810 advisory. 4.0.9-21 - Fix CVE-2020-19131 2006535 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Important Photon OS Security Update - PHSA-2022-4.0-0185

Updates of 'libtiff', 'openssl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0185

Updates of 'openssl', 'libtiff' packages of Photon OS have been released...

new packages: libtiff

An update is available for libtiff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

SUSE SLES12 Security Update : tiff (SUSE-SU-2022:1667-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1667-1 advisory. - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy within TIFFFetchStripThing in tifdirread.c bsc1195964. -...

libtiff security update

4.0.9-21 - Fix CVE-2020-19131 2006535...

USN-5421-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-35522 Chintan Shah discovere...

USN-5421-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-35522 Chintan Shah discovere...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5421-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5421-1 advisory. It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash,...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial-of-service conditions via an out-of-bounds read in LZWDecode in libtiff/tiflzw.c through a crafted tiff file...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service attacks. The vulnerability exists in the LZWDecode function the tiflzw.c which allows a malicious user to cause denial-of-service conditions via an out-of-bounds read through a crafted tiff file...

CVE-2022-1622

An out-of-bounds read vulnerability was found in Libtiff's LZWDecode function in libtiff/tiflzw.c. This flaw allows an attacker to perform a denial-of-service attack via a crafted tiff file, leading to the application crashing...

CVE-2022-1623

An out-of-bounds read vulnerability was found in Libtiff's LZWDecode function in libtiff/tiflzw.c. This flaw allows an attacker to perform a denial-of-service attack via a crafted tiff file, leading to the application crashing...

DEBIAN-CVE-2022-1623

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

CVE-2022-1622

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...