CVE-2020-35523 affecting package libtiff 4.1.0-3

CVE-2020-35523 affecting package libtiff 4.1.0-3. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2021-0210

Updates of 'linux-rt', 'wpasupplicant', 'containerd', 'linux-esx', 'nxtgn-openssl', 'libtiff', 'linux', 'linux- secure', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-3.0-0210

Updates of 'libtiff', 'wpasupplicant', 'linux-aws', 'containerd', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'nxtgn-openssl' packages of Photon OS have been released...

Photon OS 3.0: Libtiff PHSA-2021-3.0-0210

An update of the libtiff package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0210. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148191;...

Important Photon OS Security Update - PHSA-2021-0332

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'linux', 'libtiff' packages of Photon OS have been released...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-4755-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4755-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into...

The vulnerability of the TIFF-to-PDF conversion module in TIFF2PDF, a library from LibTIFF, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the TIFF-to-PDF conversion module in the LibTIFF library is related to incorrect processing of TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created TIFF file...

The vulnerability of the tif_read.c file in the LibTIFF library allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the tifread.c file in the LibTIFF library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

ALPINE-CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

PYSEC-2021-35

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

PYSEC-2021-35

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

Heap overflow

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

CVE-2021-25289

CVE-2021-25289 affects Pillow before 8.1.1. The issue is a heap-based buffer overflow in TiffDecode when decoding crafted YCbCr files, triggered by interpretation conflicts with LibTIFF in RGBA mode. This stems from an incomplete fix for CVE-2020-35654. The CVE is documented with high severity (C...

CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

Pillow Out-of-bounds Write

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.

...

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.

...