LibTIFF Buffer Overflow Vulnerability (CNVD-2023-29695)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version 4.5.0 and earlier, which stems from a boundary error when handling untrusted...

USN-5841-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

USN-5841-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation as part of the Watson NLP functionality CVE-2015-20107. GNOME libxml2 is used by IBM Robotic Process Automation as part of container base images,...

Ubuntu 16.04 ESM : LibTIFF vulnerabilities (USN-5841-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5841-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted...

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g. "WRITE of size 307203") via a crafted TIFF image.

...

Debian dla-3297 : libtiff-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3297 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3297-1 [email protected] https://www.debian.org/lts/security/...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1270)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID:CVE-2022-0924 DESCRIPTION: libtiff is vulnerable to a denial of service, caused by heap-based buffer overflow in cpContigBufToSeparateBuf. By persuading a victim...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID:CVE-2022-0561 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference in memcpy function in TIFFFetchStripThing in...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID:CVE-2022-22844 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an out-of-bounds read flaw in the TIFFmemcpy function in tifunix.c. By...

EulerOS Virtualization 3.0.2.2 : libtiff (EulerOS-SA-2023-1270)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

Debian DSA-5333-1 : tiff - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5333 advisory. Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format TIFF library and tools, whi...

PT-2023-4908

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcp utility, located in tools/tiffcp.c:948, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can lead to a...

SUSE SLES12 Security Update : tiff (SUSE-SU-2023:0199-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0199-1 advisory. - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image bsc1207413. Tenable has extracted the preceding...

AlmaLinux 9 : libtiff (ALSA-2023:0302)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0302 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff...

LibTIFF processCropSelections Function DoS

The vulnerability of the processCropSelections function tools/tiffcrop.c in the LibTIFF library arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

CVE-2022-48281

A vulnerability was found in libtiff. This vulnerability occurs due to an issue in processCropSelections in the tools/tiffcrop.c function in LibTIFF that has a heap-based buffer overflow for example, "WRITE of size 307203" via a crafted TIFF image...

Oracle Linux 9 : libtiff (ELSA-2023-0302)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0302 advisory. - Resolves: CVE-2022-2953 - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 Tenable has extracted t...

ROS-20230124-03

Vulnerability of LibTIFF set of libraries and utilities for viewing, editing and converting TIFF files is related to the processCropSelections function of the tools/tiffcrop.c file of the TIFF Image Handler component. Exploitation of the vulnerability could allow an attacker acting remotely to se...