MiracleLinux 7 : libtiff-4.0.3-35.0.6.el7.AXS7 (AXSA:2025-11106:08)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11106:08 advisory. CVE-2025-9900: fix write-what-where vulnerability in processing TIFF image files CVEs: CVE-2025-9900 A flaw was found in Libtiff. This vulnerability is a...

TencentOS Server 2: compat-libtiff3 (TSSA-2025:0811)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0811 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

SUSE CVE-2012-3444

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...

CVE-2017-6314

The makeavailableatleast function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service infinite loop via a large TIFF file...

Debian Security Advisory DSA 2529-1 (python-django - several vulnerabilities)

Jeroen Dekkers and others reported several vulnerabilities in Django, a Python Web framework. The Common Vulnerabilities and Exposures project defines the following issues: CVE-2012-3442Two functions do not validate the scheme of a redirect target, which might allow remote attackers to conduct...

CVE-2012-3444

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...

CVE-2012-3444

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...