Mageia: Security Advisory (MGASA-2024-0213)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : tiff (SUSE-SU-2024:1892-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1892-1 advisory. - CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. bsc1212233 Tenable has extracted the preceding description block directly from th...

Security Bulletin: Multiple Vulnerabilities in IBM Datacap

Summary Multiple vulnerabilities were addressed in IBM Datacap version 9.1.9 Interim Fix 004 Vulnerability Details CVEID:CVE-2023-26965 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow in the loadImage function in /libtiff/tools/tiffcrop.c. By...

Advisory ROSA-SA-2024-2429

Software: libtiff 4.0.9 OS: ROSA Virtualization 2.1 packageevrstring: libtiff-4.0.9-28.rv3 CVE-ID: CVE-2023-2731 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A null pointer dereferencing bug was found in the LZWDecode function of the Libtiff library in the libtiff/tiflzw.c file. This flaw allows a...

RHEL 7 : compat-libtiff3 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtiff: PixarLogDecode Heap Buffer Overflow CVE-2016-5875 Note that Nessus has not tested for this issue but has...

RHEL 8 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: Heap-based buffer overflow in TIFF2PDF tool CVE-2020-35524 - libtiff: heap-buffer overflow via...

RHEL 5 : qt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qt: segmentation fault in qgifhandler.cpp CVE-2015-1860 - libtiff: Out of bounds read in TIFFVGetField...

RHEL 4 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtiff: Heap-buffer overflow due to TileSize calculation when parsing tiff files CVE-2012-1173 Note that Nessus ha...

RHEL 6 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: Heap-based buffer over-read in bmp2tiff CVE-2017-9117 - LibTIFF prior to 4.0.4, as used in Apple...

RHEL 7 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: Heap-based buffer over-read in bmp2tiff CVE-2017-9117 - LibTIFF prior to 4.0.4, as used in Apple...

RHEL 9 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: heap-based buffer overflow in TIFFmemcpy in tifunix.c CVE-2022-1056 - libtiff: out-of-bounds rea...

RHEL 5 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: Heap-based buffer over-read in bmp2tiff CVE-2017-9117 - LibTIFF 4.0.3 allows remote attackers to...

Important: libtiff

Issue Overview: Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

Important: libtiff

Issue Overview: Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

Oracle Linux 8 : libtiff (ELSA-2024-3059)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3059 advisory. - Fix CVE-2022-3599 CVE-2022-4645 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2024-634)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-634 advisory. 2024-06-06: CVE-2022-48281 was added to this advisory. 2024-06-06: CVE-2023-41175 was added to this advisory. 2024-06-06: CVE-2023-40745 was added to this advisory. 2024-06-06: CVE-2023-30775 w...

OESA-2024-1663 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

libtiff security update

4.0.9-31 - Fix CVE-2022-3599 CVE-2022-4645 - Resolves: RHEL-5399 4.0.9-30 - Bump specfile to retrigger gating - Add tests folder for standard beakerlib - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688...

RHEL 8 : libtiff (RHSA-2024:3059)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3059 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: out-of-bounds read...

libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c

A flaw was found in tiffcp, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the tiffcp function in tools/tiffcp.c, resulting in a denial of service and limited information disclosure...