AZL-8527 CVE-2022-0561 affecting package libtiff for versions less than 4.3.0-2

Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712...

Silicon Graphics LibTIFF 缓冲区错误漏洞

Libtiff is a library for reading and writing files in the Tagged Image File Format abbreviated as TIFF.A buffer overflow vulnerability exists in LibTiff version 4.0.10. An attacker can exploit this vulnerability to cause a denial of service via the TIFFVGetField function in libtiff/tifdir.c...

Debian: Security Advisory (DLA-2694-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the TIFF-to-PDF conversion module in TIFF2PDF, a library from LibTIFF, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the TIFF-to-PDF conversion module in the LibTIFF library is related to incorrect processing of TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created TIFF file...

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

Debian DSA-4869-1 : tiff - security update

Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c

An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could lead to a heap-based buffer overflow in TIFFWriteScanline:tifwrite.c. An attacker may use this vulnerability to corrupt memory or cause Denial of Service...

The vulnerability of the TIFFPrintDirectory function in the LibTIFF library, which allows a hacker to cause a partial service failure.

The vulnerability of the TIFFPrintDirectory function tifprint.c in the LibTIFF library is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause partial service failure remotely...

The vulnerability of the JBIGDecode function in the library for viewing, editing, and converting TIFF files into LibTIFF files, related to writing beyond the buffer memory, allows attackers to cause service failures or execute arbitrary code.

The vulnerability of the JBIGDecode function “tifjbig.c” in the library for viewing, editing, and converting TIFF files related to LibTIFF is associated with errors that allow the execution of write operations beyond the buffer memory. Exploiting this vulnerability can enable an attacker to cause...

[SECURITY] Fedora 28 Update: libtiff-4.0.9-13.fc28

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

UBUNTU-CVE-2018-17795

The function t2pwritepdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935...

The vulnerability of the _TIFFmemcmp function in the LibTIFF library on Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the TIFFmemcmptifunix.c function in the LibTIFF library on Linux operating systems is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted tiff file...

LibTIFF Buffer Overflow Vulnerability (CNVD-2018-14918)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A buffer overflow vulnerability exists in the unixErrorHandler in tifunix.c in LibTIFF 4.0.9. An attacker can exploit this vulnerability via TIFFClientOpen, TIFFFdOpen, TIFFRawStripSize, TIFFCheckTile,...

LibTIFF Buffer Overflow Vulnerability (CNVD-2018-14920)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A buffer overflow vulnerability exists in TIFFWriteBufferSetup in tifwrite.c in LibTIFF 4.0.9. An attacker can exploit this vulnerability to cause a denial of service via TIFFWriteTile...

LibTIFF Memory Misreference Vulnerability

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A memory misreference vulnerability exists in the t2pwriteproc function in tiff2pdf.c in LibTIFF. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

LibTIFF Denial of Service Vulnerability (CNVD-2017-38251)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A denial of service vulnerability exists in tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9. A remote attacker could cause a denial of service TIFFSetupStrips heap buffer overflow and application crash by...

Silicon Graphics LibTIFF 'tools/tiff2pdf.c' Heap Buffer Overflow Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A heap buffer overflow vulnerability exists in the tools/tiff2pdf.c file in Silicon Graphics...

DEBIAN-CVE-2014-8127

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...

UBUNTU-CVE-2017-9935

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...

Debian: Security Advisory (DSA-3844-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...