SUSE-SU-2025:20068-1 Security update for tiff

This update for tiff fixes the following issues: CVE-2024-7006: Fix pointer deref in tifdirinfo.c bsc1228924...

libtiff: NULL pointer dereference in tif_dirinfo.c

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

libtiff: NULL pointer dereference in tif_dirinfo.c

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

Medium: libtiff

Issue Overview: libtiff: NULL pointer dereference in tifdirinfo.c CVE-2024-7006 Affected Packages: libtiff Issue Correction: Run dnf update libtiff --releasever 2023.6.20241010 or dnf update --advisory ALAS2023-2024-720 --releasever 2023.6.20241010 to update your system. More information on how t...

The vulnerability of the LibTIFF library, related to the pointer manipulation involving NULL, allows an attacker to trigger a service failure.

The vulnerability of the LibTIFF library is related to the assignment of the zero pointer through tifdirinfo.c. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

OESA-2024-2046 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2024-7006

...

OESA-2024-1987 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2024-7006

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

CVE-2024-7006

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

SUSE CVE-2024-7006

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS or remote code execution. It can happen because the attacker can perform Illegal writes by sending a malicious TIFF file to the TIFFVGetField function in tifdirinfo.c. It can also cause a remote code execution if an attacker writes malicious code...

CVE-2016-3634

CVE-2016-3634 affects LibTIFF up to version 4.0.6. The vulnerability exists in the tagCompare function in tif_dirinfo.c used by the thumbnail tool, causing an out-of-bounds read and potential crash (denial of service). Remediation per connected advisories is to upgrade to LibTIFF 4.0.7 or newer.

CVE-2016-3634

The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02227)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tagCompare function in the tifdirinfo.c file in Silicon Graphics LibTiff 4.0.6 and earlier versions. An attacker can...