Silicon Graphics LibTIFF Integer Overflow Vulnerability (CNVD-2020-13553)

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files.GDAL is an open source geospatial data abstraction library . An integer overflow vulnerabilit...

Amazon Linux AMI : libtiff (ALAS-2019-1306)

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service application crash via a crafted GIF file.CVE-2016-3186 An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could lead to a heap-bas...

Medium: libtiff

Issue Overview: Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service application crash via a crafted GIF file.CVE-2016-3186 An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could le...

The vulnerability of the LibTIFF library, related to buffer overflows based on the TIFFSetupStrips mechanism, allows attackers to trigger a service failure.

The vulnerability of the LibTIFF library is related to the buffer overflow caused by the TIFFSetupStrips function. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created TIFF file...

Security update for djvulibre (moderate)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2019:2219-1 Rating: moderate References: 1146569 1146571 1146572 1146702 Cross-References: CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

openSUSE Security Update : djvulibre (openSUSE-2019-2217)

This update for djvulibre fixes the following issues : Security issues fixed : - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2019-2056)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to...

EulerOS Virtualization for ARM 64 3.0.2.0 : libtiff (EulerOS-SA-2019-1937)

According to the version of the libtiff package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-bas...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2019-1857)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to...

libtiff security update

CentOS Errata and Security Advisory CESA-2019:2053 An update for libtiff is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

compat security update

CentOS Errata and Security Advisory CESA-2019:2051 An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

CentOS 7 : libtiff (CESA-2019:2053)

An update for libtiff is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libtiff:tiff_read_rgba_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: https://gitlab.com/libtiff/libtiff.git Detailed Report: https://oss-fuzz.com/testcase?key=5715939605086208 Project: libtiff Fuzzing Engine: libFuzzer Fuzz Target: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2019-14973

TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash...

Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...

Scientific Linux Security Update : compat-libtiff3 on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: NULL pointer dereference in tifprint.c:TIFFPrintDirectory causes a denial of service CVE-2018-7456 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128211; scriptversion"1.4";...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2019-1834)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.CVE-2018-10779 Note that Tenable...

Integer Overflow

libtiff.so is vulnerable to denial of service DoS. The attack is possible because TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c do not safely detect overflows in the multiplication of nmemb and elemsize, causing an application crash...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-1807)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffer overflow and...

libtiff:tiff_read_rgba_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: https://gitlab.com/libtiff/libtiff.git Detailed Report: https://oss-fuzz.com/testcase?key=5756923239989248 Project: libtiff Fuzzing Engine: libFuzzer Fuzz Target: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...