RHEL 9 : libtiff (RHSA-2024:8914)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8914 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: NULL pointer...

AlmaLinux 9 : libtiff (ALSA-2024:8914)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8914 advisory. libtiff: NULL pointer dereference in tifdirinfo.c CVE-2024-7006 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2024-2801)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures...

Medium: libtiff

Issue Overview: libtiff: NULL pointer dereference in tifdirinfo.c CVE-2024-7006 Affected Packages: libtiff Issue Correction: Run dnf update libtiff --releasever 2023.6.20241010 to update your system. New Packages: aarch64: libtiff-static-4.4.0-4.amzn2023.0.19.aarch64 ...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF Vulnerability Details CVEID:CVE-2023-41175 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an integer overflow in raw2tiff.c. By persuading a victim to open a...

USN-6997-2 tiff vulnerability

USN-6997-1 fixed a vulnerability in LibTIFF. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial...

USN-6997-2: LibTIFF vulnerability

USN-6997-1 fixed a vulnerability in LibTIFF. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial...

USN-6997-1: LibTIFF vulnerability

It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service...

The vulnerability of the LibTIFF library, related to the pointer manipulation involving NULL, allows an attacker to trigger a service failure.

The vulnerability of the LibTIFF library is related to the assignment of the zero pointer through tifdirinfo.c. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2024-5862

Name of the Vulnerable Software and Affected Versions Libtiff affected versions not specified Description A null pointer dereference flaw was found in Libtiff via tif dirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF Vulnerability Details CVEID:CVE-2023-6228 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow in cpStripToTile function in tools/tiffcp.c. By persuading a...

MGASA-2024-0213 Updated libtiff packages fix security vulnerability

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. CVE-2023-3164...

CentOS 9 : libtiff-4.4.0-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-5.el9 build changelog. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Libtiff

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Libtiff. Vulnerability Details CVEID:CVE-2023-30774 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow related to TIFFTAGINKNAMES and TIFFTAGNUMBEROFIN...

SUSE SLED15: libtiff-devel / libtiff-devel-32bit / libtiff5 / libtiff5-32bit / etc (SUSE-SU-2024:0594-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0594-1 advisory. - CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt bsc1219213. Tenable has extracted the preceding...

Medium: libtiff

Issue Overview: A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service. CVE-2023-52356 Affected Packages: libtiff Issue...

LibTIFF Segmentation Error Vulnerability

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A segmentation error vulnerability exists in LibTIFF that stems from the presence of a segmentation error issue, which can be exploited by a...

LibTIFF Denial of Service Vulnerability (CNVD-2024-06436)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in LibTIFF, which stems from an out-of-memory issue that can be exploited by a remote attacker to...

DEBIAN-CVE-2023-52356

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...

CVE-2023-52356

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...