[SECURITY] [DLA 1391-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u21 CVE ID : CVE-2017-11613 CVE-2018-5784 Debian Bug : 869823 890441 Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service: CVE-2017-11613 Ddenial of service vulnerability in the...

SUSE-SU-2018:1472-1 Security update for tiff

This update for tiff fixes the following issues: Security issues fixed: - CVE-2016-5315: The setByteArray function in tifdir.c allowed remote attackers to cause a denial of service out-of-bounds read via a crafted tiff image. bsc984809 - CVE-2016-10267: LibTIFF allowed remote attackers to cause a...

Design/Logic Flaw

DISPUTED tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to the...

CVE-2018-11556

tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to t...

PT-2018-10664 · Little Cms +1 · Little Cms +1

Name of the Vulnerable Software and Affected Versions: Little CMS version 2.9 Description: The issue is related to an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a, which can be triggered via a crafted TIFF file. However, the Little CMS developers...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the TIFFWriteDirectoryTagSubifd function in tifdirwrite.c to cause an assertion abort that can crash the application...

Invalid Write

libtiff.so is vulnerable to invalid write attacks. The vulnerability exists in the TIFFReadDirectory function of libtiff/tifdirread.c where field data for extension tags can be written to invalid memory locations...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file that when cropped can cause a divide by zero error that can crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a TIFF file to the application to the TIFFReadDirectory method in tifdirread.c to cause a memory leak that can crash the application...

Information Disclosure

libtiff.so is vulnerable to information disclosure attacks. The vulnerability exists due to the possibility of accessing uninitialized buffers in TIFFReadBufferSetup of libtiff/tifread.c...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a memory leak in OJPEGReadHeaderInfoSecTablesAcTable of libtiff/tifojpeg.c that would cause a DoS attack when the leaked memory is accessed...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0048

An update of 'libtiff' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2018-0048

Updates of 'libtiff' packages of Photon OS have been released...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The library fails to verify BitsPerSample in a given tiff file, allowing a malicious user to pass a tiff file to the application to cause an out-of-bounds write that can lead to code being executed or the application crashing...

CVE-2018-10963

The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...

MGASA-2018-0246 Updated libtiff packages fix security vulnerabilities

The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726. CVE-2018-10963 In LibTIFF 4.0.9, a heap-based buffer overflo...

Updated libtiff packages fix security vulnerabilities

The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726. CVE-2018-10963 In LibTIFF 4.0.9, a heap-based buffer overflo...

Buffer Overflow

libtiff.so is vulnerable to buffer overflows. A malicious user can pass a tiff file to the LZWDecodeCompat function in tiflzw.c, causing a buffer overflow that can crash the application or other cause arbitrary code to be executed...

[SECURITY] [DLA 1378-1] tiff3 security update

Package : tiff3 Version : 3.9.6-11+deb7u11 CVE ID : CVE-2018-8905 Debian Bug : 893806 A heap-based buffer overflow was discovered in the LZWDecodeCompat function in tiflzw.c LibTIFF 4.0.9 and earlier. This vulnerability might be leveraged by remote attackers to crash the client via a crafted TIFF...

[SECURITY] [DLA 1377-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u20 CVE ID : CVE-2018-8905 Debian Bug : 893806 A heap-based buffer overflow was discovered in the LZWDecodeCompat function in tiflzw.c LibTIFF 4.0.9 and earlier. This vulnerability might be leveraged by remote attackers to crash the client via a crafted TIFF L...