Lucene search
+L

8920 matches found

Positive Technologies
Positive Technologies
•added 2023/02/12 12:00 a.m.•15 views

PT-2023-4914

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3609, which can be exploited to cause a denial-of-service via a crafted tiff file. This can allow attackers t...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits1References138
Positive Technologies
Positive Technologies
•added 2023/02/12 12:00 a.m.•12 views

PT-2023-4912

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3724, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. Recommendatio...

6.8CVSS6.6AI score0.00428EPSS
SaveExploits1References134
Positive Technologies
Positive Technologies
•added 2023/02/12 12:00 a.m.•11 views

PT-2023-4911

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be...

6.8CVSS6.6AI score0.00443EPSS
SaveExploits2References135
Tenable Nessus
Tenable Nessus
•added 2023/02/10 12:00 a.m.•29 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1363)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

8.8CVSS6.4AI score0.01331EPSS
SaveExploits7References8
OpenVAS
OpenVAS
•added 2023/02/10 12:00 a.m.•34 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1363)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01331EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2023/02/10 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01331EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
•added 2023/02/10 12:00 a.m.•35 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1391)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

8.8CVSS6.4AI score0.01331EPSS
SaveExploits7References8
OpenVAS
OpenVAS
•added 2023/02/09 12:00 a.m.•28 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS7.4AI score0.01117EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
•added 2023/02/08 12:00 a.m.•48 views

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2023-1326)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

7.7CVSS6.7AI score0.01117EPSS
SaveExploits6References7
Photon
Photon
•added 2023/02/08 12:00 a.m.•42 views

Important Photon OS Security Update - PHSA-2023-3.0-0528

Updates of 'libtiff', 'u-boot', 'linux-aws', 'redis', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'python3' packages of Photon OS have been released...

6.5CVSS6.9AI score0.03937EPSS
SaveExploits0
osv_mgasa
osv_mgasa
•added 2023/02/07 12:06 a.m.•22 views

MGASA-2023-0038 Updated libtiff packages fix security vulnerability

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image. CVE-2022-48281...

5.5CVSS6AI score0.00443EPSS
SaveExploits1References3
Mageia
Mageia
•added 2023/02/07 12:06 a.m.•66 views

Updated libtiff packages fix security vulnerability

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image. CVE-2022-48281...

5.5CVSS4.1AI score0.00443EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/07 12:00 a.m.•6 views

PT-2023-4909

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcrop utility, located in tools/tiffcrop.c:3701, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This is also...

6.8CVSS6.4AI score0.00428EPSS
SaveExploits4References126
Photon
Photon
•added 2023/02/07 12:00 a.m.•34 views

Moderate Photon OS Security Update - PHSA-2023-4.0-0328

Updates of 'redis', 'libtiff' packages of Photon OS have been released...

5.5CVSS6AI score0.71984EPSS
SaveExploits1
osv_oesa
osv_oesa
•added 2023/02/03 11:05 a.m.•7 views

OESA-2023-1047 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

7.5CVSS7.4AI score0.00443EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/02/03 12:00 a.m.•27 views

Ubuntu: Security Advisory (USN-5841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.04204EPSS
SaveExploits2References2
CNVD
CNVD
•added 2023/02/03 12:00 a.m.•36 views

LibTIFF Buffer Overflow Vulnerability (CNVD-2023-29695)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version 4.5.0 and earlier, which stems from a boundary error when handling untrusted...

7AI score0.00443EPSS
SaveExploits1Affected Software1
Ubuntu
Ubuntu
•added 2023/02/02 4:34 p.m.•91 views

USN-5841-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

8.8CVSS7.3AI score0.04204EPSS
SaveExploits2
osv_usn
osv_usn
•added 2023/02/02 4:34 p.m.•11 views

USN-5841-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

8.8CVSS7.4AI score0.04204EPSS
SaveExploits2References7
IBM Security Bulletins
IBM Security Bulletins
•added 2023/02/02 3:37 a.m.•181 views

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation as part of the Watson NLP functionality CVE-2015-20107. GNOME libxml2 is used by IBM Robotic Process Automation as part of container base images,...

9.8CVSS7.7AI score0.1873EPSS
SaveExploits39Affected Software1
Rows per page
Query Builder