RHEL 8 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtiff: Heap-based buffer overflow in TIFF2PDF tool CVE-2020-35524 - libtiff: heap-buffer overflow via...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS. The attacker can trigger the attacker by sending a malicious TIFF image to the cpTags in tools/tiff2bw.c and tools/pal2rgb.c, causing two out-of-bounds writes that can crash the application or cause arbitrary code to be executed...

CVE-2017-17095

CVE-2017-17095 affects LibTIFF 4.0.9 (tools/pal2rgb.c in pal2rgb). A crafted TIFF file can trigger a heap-based buffer overflow (TIFFSetupStrips), leading to denial of service and possible other impact. Public advisories (Debian, Gentoo, Cloud Foundry, CNVD) confirm this vulnerability in libtiff;...