8984 matches found
RHEL 9 : libtiff (RHSA-2023:0302)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0302 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from...
Moderate: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from Divide By Zero Error CVE-2022-2056, CVE-2022-2057, CVE-2022-2058 libtiff: Double free or corruption in rotateImage function at tiffcrop.c CVE-2022-2519...
ALSA-2023:0302 Moderate: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from Divide By Zero Error CVE-2022-2056, CVE-2022-2057, CVE-2022-2058 libtiff: Double free or corruption in rotateImage function at tiffcrop.c CVE-2022-2519...
CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
LibTIFF buffer error vulnerability
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version 4.5.0 and earlier, which stems from a boundary error when handling untrusted...
CVE-2022-48281
CVE-2022-48281 affects LibTIFF (tools/tiffcrop.c) with a heap-based buffer overflow exposed by crafted TIFF images. The issue is described for LibTIFF up to version 4.5.0 (processCropSelections in tiffcrop.c). Impact is a potential crash or memory corruption due to a near-write of excessive size ...
CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
PT-2023-1169 · Libtiff +10 · Libtiff +10
Name of the Vulnerable Software and Affected Versions: LibTIFF versions through 4.5.0 Description: The issue is related to a heap-based buffer overflow in the processCropSelections function of the tools/tiffcrop.c file in the LibTIFF library. This can be exploited by a remote attacker via a craft...
Moderate Photon OS Security Update - PHSA-2023-3.0-0516
Updates of 'libtiff' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2023-0516
Updates of 'libtiff' packages of Photon OS have been released...
AlmaLinux 8 : libtiff (ALSA-2023:0095)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0095 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff...
libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits()
An improper input validation flaw was found in libtiff's tiffcrop utility. This issue can lead to an out-of-bounds read and cause a crash if an attacker can supply a crafted file to tiffcrop...
libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c
An out-of-bound read flaw was found in LibTIFF, in extractImageSection in the tools/tiffcrop.c:6905, allowing attackers to cause a denial of service via a crafted tiff file...
Moderate: Red Hat Security Advisory: libtiff security update
An update for libtiff is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
libtiff: Assertion fail in rotateImage() function at tiffcrop.c
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
libtiff: Double free or corruption in rotateImage() function at tiffcrop.c
A double-free flaw was found in the tiffcrop tool distributed with the libtiff tools package. The double-free issue leads to a denial of service, impacting the availability...