Moderate Photon OS Security Update - PHSA-2022-3.0-0400

Updates of 'libtiff' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2022-0400

Updates of 'libtiff' packages of Photon OS have been released...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the "invertImage" function in the component "tiffcrop" allowing an attacker to crash the system via the "invertImage"...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2022:1882-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1882-1 advisory. - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1739)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6888 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: The issue is related to an invalid pointer free operation in the TIFFClose function at tif close.c:131, called by tiffcrop.c:2522. This can cause a program crash and denial of service when processing...

PT-2022-6894 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: The issue is related to a double free or corruption in the rotateImage function at tiffcrop.c:8839. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availability ...

PT-2022-6895 · Libtiff +8 · Libtiff +8

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: A flaw in the rotateImage function in the tiffcrop.c file at line 8621 can cause a program crash when reading a crafted input due to a sysmalloc assertion failure. This issue is related to an incorrect...

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

...

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

...

Rocky Linux 8 : libtiff (RLSA-2022:1810)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1810 advisory. - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the invertImage function in the component tiffcrop. CVE-2020-19131 Note th...

Oracle Linux 8 : libtiff (ELSA-2022-1810)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1810 advisory. 4.0.9-21 - Fix CVE-2020-19131 2006535 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Important Photon OS Security Update - PHSA-2022-4.0-0185

Updates of 'libtiff', 'openssl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0185

Updates of 'openssl', 'libtiff' packages of Photon OS have been released...

new packages: libtiff

An update is available for libtiff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

SUSE SLES12 Security Update : tiff (SUSE-SU-2022:1667-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1667-1 advisory. - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy within TIFFFetchStripThing in tifdirread.c bsc1195964. -...

libtiff security update

4.0.9-21 - Fix CVE-2020-19131 2006535...

USN-5421-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-35522 Chintan Shah discovere...

USN-5421-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-35522 Chintan Shah discovere...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5421-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5421-1 advisory. It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash,...