Fedora: Security Advisory for libtiff (FEDORA-2022-df1df6debd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Critical Photon OS Security Update - PHSA-2022-0476

Updates of 'mariadb', 'go', 'expat' packages of Photon OS have been released...

[SECURITY] Fedora 35 Update: libtiff-4.3.0-4.fc35

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-4777 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff version 4.3.0 Description: The issue is related to a reachable assertion in tiffcp in libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service...

EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2022-1264)

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-1274)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component 'tiffcrop'...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1175)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2022-1175)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component 'tiffcrop'...

EulerOS 2.0 SP3 : compat-libtiff3 (EulerOS-SA-2022-1159)

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component...

openSUSE 15 Security Update : tiff (openSUSE-SU-2022:0480-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0480-1 advisory. - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffer overfl...

PT-2022-4806 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff library version 4.3.0 Description: A heap buffer overflow in the ExtractImageSection function in tiffcrop.c allows an attacker to trigger unsafe or out of bounds memory access via a crafted TIFF image file, which could result in an...

SUSE SLES11 Security Update : tiff (SUSE-SU-2022:14888-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14888-1 advisory. - CVE-2015-8683: Fixed out-of-bounds when reading CIE Lab image format files bsc1156754. - CVE-2015-8665: Fixed out-of-bounds read in...

SUSE SLES12 Security Update : tiff (SUSE-SU-2022:0496-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0496-1 advisory. - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb bsc1071031. - CVE-2019-17546: Fixed integer overflow that potentially...

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources the fix is available with commit eecb0712.

...

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources a fix is available with commit 561599c.

...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2022:0480-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0480-1 advisory. - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb bsc1071031. - CVE-2019-17546: Fixed integer overflow...

LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.

...

CVE-2022-0562

A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFReadDirectory in tifdirread.c. This flaw allows an attacker to exploit this vulnerability via a crafted TIFF file, causing a crash and leading to a denial of service...

CVE-2022-0561

A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchStripThing in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service...