Lucene search
+L

1543 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/25 12:00 a.m.•6 views

CVE-2023-52355: Out-of-bounds Write

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64 API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB...

7.5CVSS6.7AI score0.01829EPSS
SaveExploits1References6
Ubuntu
Ubuntu
•added 2024/01/16 12:44 p.m.•61 views

USN-6586-1: FreeImage vulnerabilities

It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS and...

7.8CVSS7.7AI score0.0421EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•63 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1088)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffe...

6.5CVSS6.6AI score0.01825EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•41 views

EulerOS Virtualization 2.11.1 : libtiff (EulerOS-SA-2023-3361)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via...

6.5CVSS6.3AI score0.01188EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•33 views

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-3013)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

6.5CVSS6.4AI score0.01188EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•45 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-3219)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

6.5CVSS6.4AI score0.01188EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•43 views

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2023-3307)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

6.5CVSS7.2AI score0.00947EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•33 views

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2024-1012)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via...

6.5CVSS7.1AI score0.00947EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•60 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-1064)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffe...

6.5CVSS6.6AI score0.01825EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2024/01/05 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1012)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00947EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•14 views

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the TIFFVGetField function in the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created TIFF file...

7.8CVSS7.2AI score0.01913EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•13 views

LibTIFF main function Heap Buffer Overflow DoS

The vulnerability of the main function in the tiffcp.c component of the LibTIFF library is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures through the use of a specially created TIFF file...

6.1CVSS7AI score0.00562EPSS
SaveExploits1References10Affected Software5
OpenVAS
OpenVAS
•added 2023/12/26 12:00 a.m.•29 views

SUSE: Security Advisory (SUSE-SU-2023:4969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01843EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2023/12/25 8:14 a.m.•17 views

SUSE-SU-2023:4969-1 Security update for jbigkit

This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler bsc1198146...

6.5CVSS6.4AI score0.01843EPSS
SaveExploits1References3
osv_suse
osv_suse
•added 2023/12/25 8:13 a.m.•13 views

SUSE-SU-2023:4968-1 Security update for jbigkit

This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler bsc1198146...

6.5CVSS6.4AI score0.01843EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/18 2:15 p.m.•28 views

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

5.5CVSS0.00399EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/12/18 2:15 p.m.•53 views

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

3.3CVSS6.2AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/12/14 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-3361)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.01188EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/12/13 12:00 a.m.•78 views

SUSE SLES12 Security Update : tiff (SUSE-SU-2023:4736-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4736-1 advisory. - CVE-2023-2731: Fix null pointer deference in LZWDecode bsc1211478. - CVE-2023-1916: Fix out-of-bounds read in extractImageSection...

6.5CVSS6.6AI score0.01733EPSS
SaveExploits5References16
Ubuntu
Ubuntu
•added 2023/12/12 1:08 p.m.•69 views

USN-6551-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled writing TIFF files. A remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service...

7.5CVSS7.4AI score0.0153EPSS
SaveExploits0
Rows per page
Query Builder