Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF Vulnerability Details CVEID:CVE-2024-6716 DESCRIPTION: libtiff is vulnerable to a denial of service, caused by an out-of-memory flaw in the TIFFReadEncodedStrip function. By persuading a victim to ope...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-6228)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6228 advisory. - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on...

Linux Distros Unpatched Vulnerability : CVE-2023-0800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For user...

Linux Distros Unpatched Vulnerability : CVE-2022-2953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file...

Linux Distros Unpatched Vulnerability : CVE-2016-5317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows...

Linux Distros Unpatched Vulnerability : CVE-2017-7599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.0.7 has an outside the range of representable values of type short undefined behavior issue, which might allow remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2016-10269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause...

Linux Distros Unpatched Vulnerability : CVE-2015-7313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF before 4.0.7 allows remote attackers to cause a denial of service memory consumption and crash via a crafted tiff file. CVE-2015-7313 Note that Nessus...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-3164)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3164 advisory. - A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 a...

CVE-2023-3164 affecting package libtiff for versions less than 4.6.0-5

CVE-2023-3164 affecting package libtiff for versions less than 4.6.0-5. A patched version of the package is available...

Azure Linux 3.0 Security Update: libtiff (CVE-2023-52356)

The version of libtiff installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52356 advisory. - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to th...

Azure Linux 3.0 Security Update: libtiff (CVE-2023-6277)

The version of libtiff installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6277 advisory. - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen API May allow a remote...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-1108)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3164 affecting package libtiff for versions less than 4.6.0-5

CVE-2023-3164 affecting package libtiff for versions less than 4.6.0-5. A patched version of the package is available...

PT-2025-30956

Name of the Vulnerable Software and Affected Versions LibTIFF versions up to 4.7.0 Description A critical issue was identified in LibTIFF, specifically within the setrow function of the tools/thumbnail.c file. This manipulation results in a buffer overflow, potentially allowing for local...

PT-2025-32545

Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to 4.5.1 Description: A stack-based buffer overflow issue exists in the tiffcrop component of LibTIFF, specifically within the readSeparateStripsetoBuffer function located in the tools/tiffcrop.c file. Local access is...

PT-2026-21537

Name of the Vulnerable Software and Affected Versions libtiff versions prior to 4.7.1 Description The libtiff library contains a stack overflow issue in the readSeparateStripsIntoBuffer function. Recommendations Update libtiff to a version newer than 4.7.1...

PT-2025-39179

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.7.0 LibTIFF version 4.7.0 Description A flaw exists in LibTIFF that results in a "write-what-where" condition. This issue is triggered when the library processes a specially crafted TIFF image file. An attacker can...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-2833)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures...

Oracle Linux 9 : libtiff (ELSA-2024-8914)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8914 advisory. 4.4.0-12.1 - fix CVE-2024-7006 a null pointer dereference in tifdirinfo RHEL-52931 Tenable has extracted the preceding description block directly from the Oracl...