Debian dla-3382 : libopenimageio-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3382 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3382-1 [email protected]...

libtiff 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. LibTIFF suffers from an out-of-bounds read vulnerability that stems from a lack of proper validation of user-supplied data, where specially...

PT-2023-4906 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: libtiff versions 4.x Description: The issue is related to a flaw in the extractImageSection function of the libtiff library, which can cause an out-of-bounds read in memory. This can lead to a denial of service and limited information...

CVE-2023-1916

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure...

Fedora: Security Advisory for ImageMagick (FEDORA-2023-e76c8fab34)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.82-1.fc36

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Fedora: Security Advisory for ImageMagick (FEDORA-2023-f3ced9cffd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.82-1.fc37

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

The vulnerability of the tiffcrop function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop function in the LibTIFF library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created tiff file...

The vulnerability of the tiffcrop function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop function in the LibTIFF library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a specially created tiff file...

Fedora: Security Advisory for ImageMagick (FEDORA-2023-f992309b7e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libtiff packages fix security vulnerability

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. CVE-2022-4645...

TinyTIFF 安全漏洞

TinyTIFF is a lightweight C/C++ library by Jan W. Krieger, a personal developer. It is capable of reading and writing basic TIFF files. A security vulnerability exists in TinyTIFF version 3.0.0.0, which stems from some unknown processing in the file tinytiffreader.c of the component File Handler,...

Important: libtiff

Issue Overview: A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchStripThing in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service...

Important: clamav

Issue Overview: A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improp...

Amazon Linux 2023 : clamav, clamav-data, clamav-devel (ALAS2023-2023-052)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-052 advisory. A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-050)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-050 advisory. A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchStripThing in tifdirread.c. This flaw allows an attacker with a crafted...

OSV-2023-184 UNKNOWN READ in LibRaw::sget4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57105 Crash type: UNKNOWN READ Crash state: LibRaw::sget4 LibRaw::parseAdobeRAFMakernote LibRaw::parsetiffifd...

PT-2023-35704 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a crash in LibRaw, specifically in the LibRaw::sget4 function, which is called by LibRaw::parseAdobeRAFMakernote and LibRaw::parse tiff ifd. The crash type is reporte...

Fedora 36 : tkimg (2023-40b675d7ae)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-40b675d7ae advisory. Apply upstream libtiff fix for CVE-2022-4645 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...