7906 matches found
Fedora 27 : libtiff (2018-335aec0507)
Added fix for CVE-2018-7456. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Buffer Overread
libtiff.so is vulnerable to buffer overreads. The application does not properly validate biWidth and biHeight variable in bmp image headers which can cause buffer overreads in the application...
CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
Null pointer dereference
LibTIFF 4.0.9 has a NULL pointer dereference in the jpegfdct16x16 function in jfdctint.c...
CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
CVE-2018-10126
The CVE-2018-10126 issue affects ijg-libjpeg before 9d (as used by LibTIFF/tiff2pdf). The root cause is a missing NULL pointer check in jpeg_fdct_16x16 in jfdctint.c, which can lead to a NULL pointer dereference. Affected deployments include LibTIFF-based workflows; multiple external entries (NVD...
CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
Updated libtiff packages fix security vulnerability
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tifprint.c in LibTIFF 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. This affects an earlier part of the TIFFPrintDirectory function that was not addressed...
MGASA-2018-0208 Updated libtiff packages fix security vulnerability
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tifprint.c in LibTIFF 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. This affects an earlier part of the TIFFPrintDirectory function that was not addressed...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service DoS. It does not validate the declared number of directory entries with its actual number. Therefore, an attacker can launch the attack by sending a malicious TIFF file to TIFFSetDirectory function of tifdir.c, draining the resources...
libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in inflate
Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=5161833930424320 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...
libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in putgreytile
Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=5203168024592384 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...
libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in inflate
Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=5273368258412544 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...
libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB
Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=5702102715203584 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...
libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in adler32_z
Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=4834991885254656 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...
[SECURITY] Fedora 28 Update: libtiff-4.0.9-7.fc28
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Fedora 27 : libtiff (2018-e6a51e99a4)
Added fix for CVE-2018-5784. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora Update for libtiff FEDORA-2018-e6a51e99a4
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 27 Update: libtiff-4.0.9-7.fc27
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Ubuntu 14.04 LTS / 16.04 LTS : LibTIFF vulnerabilities (USN-3606-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3606-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...