CVE-2016-3658

CVE-2016-3658 affects LibTIFF 4.0.6 and earlier, where TIFFWriteDirectoryTagLongLong8Array in tif_dirwrite.c (tiffset tool) enables remote out-of-bounds reads, causing denial of service. Mitigation: upgrade LibTIFF to 4.0.7 or newer (see Debian/Arch advisories and upstream fixes).

CVE-2016-3634

CVE-2016-3634 affects LibTIFF up to version 4.0.6. The vulnerability exists in the tagCompare function in tif_dirinfo.c used by the thumbnail tool, causing an out-of-bounds read and potential crash (denial of service). Remediation per connected advisories is to upgrade to LibTIFF 4.0.7 or newer.

CVE-2016-3619

The DumpModeEncode function in tifdumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3623

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...

CVE-2016-3625

tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

CVE-2016-3634

The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...

CVE-2016-3623

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...

CVE-2016-3631

CVE-2016-3631 affects LibTIFF 4.0.6 and earlier. The vulnerability exists in the thumbnail tool’s cpStrips and cpTiles functions, enabling remote attackers to trigger a denial of service via an out-of-bounds read related to the bytecounts[] array. The connected documents confirm the same CVE appe...

CVE-2016-3621

The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3633

The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the src variable...

CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...

CVE-2016-3620

CVE-2016-3620 affects LibTIFF’s bmp2tiff tool: the ZIPEncode function in tif_zip.c (v4.0.6 and earlier) can be triggered by a crafted BMP image to cause a denial of service via a buffer over-read. Multiple connected sources confirm the issue and list the same vulnerable version range. Remediation...

CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...

CVE-2016-3621

The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

CVE-2016-3622

The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...

CVE-2016-3631

The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...

CVE-2016-3623

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...

UBUNTU-CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...

CVE-2016-3622

The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...

CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...