MGASA-2022-0337 Updated libtiff packages fix security vulnerability

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation. CVE-2022-2867...

Updated libtiff packages fix security vulnerability

libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation. CVE-2022-2867...

The vulnerability of the LibTIFF library, related to pointer dereferencing errors, allows attackers to trigger a service failure.

The vulnerability of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

Ubuntu: Security Advisory (USN-5523-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate Photon OS Security Update - PHSA-2022-3.0-0451

Updates of 'libtiff' packages of Photon OS have been released...

macOS 12.x < 12.6 Multiple Vulnerabilities (HT213444)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6. It is, therefore, affected by multiple vulnerabilities: - An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6...

Important Photon OS Security Update - PHSA-2022-0245

Updates of 'libtiff', 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0245

Updates of 'libtiff', 'bluez' packages of Photon OS have been released...

The vulnerability of the LibTIFF library, related to the lack of checks for zero division, allows attackers to trigger a service failure.

The vulnerability of the LibTIFF library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created TIFF file...

The vulnerability of the LibTIFF library, related to reading beyond the allowed buffer data limits, allows an attacker to cause a service failure.

The vulnerability of the LibTIFF library relates to reading data beyond the acceptable buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created TIFF file...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-2326)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-2297)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted...

The vulnerability of the LibTIFF library, related to the lack of use of the assert() function, allows a attacker to trigger a service failure.

The vulnerability of the LibTIFF library is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created TIFF file...

The vulnerability of the tif_dirread.c component in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tifdirread.c component in the LibTIFF library is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created TIFF file...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2297)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5523-2 tiff vulnerabilities

USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909, CVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that LibTIFF was not properly perf orming...

USN-5523-2: LibTIFF vulnerabilities

USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909, CVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that LibTIFF was not properly perf orming...

Ubuntu 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5523-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5523-2 advisory. USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909,...

USN-5604-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2022-2867, CVE-2022-2869 It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly u...