Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2939-1
HistoryMar 23, 2016 - 12:00 a.m.

LibTIFF vulnerabilities

2016-03-2300:00:00
ubuntu.com
36

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Releases

  • Ubuntu 15.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchlibtiff5< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff-doc< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff-opengl< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff-opengl-dbgsym< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff-tools< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff-tools-dbgsym< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff5-dbgsym< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiff5-dev< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiffxx5< 4.0.3-12.3ubuntu2.1UNKNOWN
Ubuntu15.10noarchlibtiffxx5-dbgsym< 4.0.3-12.3ubuntu2.1UNKNOWN
Rows per page:
1-10 of 301

Related

openvas 15
debian 6
cloudfoundry 1
nessus 34
osv 3
amazon 2
f5 3
ibm 3
ubuntucve 6
prion 6
cve 6
debiancve 6
mageia 1
oraclelinux 2
redhat 2
centos 2
veracode 6
freebsd 2
slackware 1
suse 1
gentoo 1
archlinux 2
kitploit 1
openvas
openvas
Debian Security Advisory DSA 3467-1 (tiff - security update)
2016-02-06 00:00:00
Debian Security Advisory DSA 3467-1 (tiff - security update)
2016-02-06 00:00:00
Ubuntu Update for tiff USN-2939-1
2016-03-24 00:00:00
debian
debian
[SECURITY] [DSA 3467-1] tiff security update
2016-02-06 07:39:28
[SECURITY] [DSA 3467-1] tiff security update
2016-02-06 07:39:28
[SECURITY] [DLA 405-1] tiff security update
2016-01-30 13:24:07
cloudfoundry
cloudfoundry
USN-2939-1 LibTIFF vulnerabilities | Cloud Foundry
2016-03-24 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2939-1)
2016-03-24 00:00:00
Debian DSA-3467-1 : tiff - security update
2016-02-08 00:00:00
Debian DLA-405-1 : tiff security update
2016-02-01 00:00:00
osv
osv
tiff - security update
2016-01-30 00:00:00
tiff - security update
2016-01-26 00:00:00
tiff3 - security update
2017-03-30 00:00:00
amazon
amazon
Important: compat-libtiff3
2016-08-17 13:30:00
Important: libtiff
2016-08-17 13:30:00
f5
f5
SOL35155453 - Multiple LibTIFF vulnerabilities
2016-11-08 00:00:00
K35155453 : Multiple LibTIFF vulnerabilities
2016-11-08 00:00:00
K89096577 : LibTIFF vulnerabilities CVE-2016-5314 and CVE-2015-8784
2016-11-08 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in tiff affect IBM Flex System Manager(FSM)
2018-06-18 01:32:21
Security Bulletin: Libtiff vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in libtiff affect PowerKVM
2018-06-18 01:33:05
ubuntucve
ubuntucve
CVE-2015-8683
2015-12-31 00:00:00
CVE-2015-8783
2016-02-01 00:00:00
CVE-2015-8781
2016-02-01 00:00:00
prion
prion
Out-of-bounds
2016-02-01 21:59:00
Out-of-bounds
2016-02-01 21:59:00
Out-of-bounds
2016-04-13 17:59:00
cve
cve
CVE-2015-8781
2016-02-01 21:59:00
CVE-2015-8782
2016-02-01 21:59:00
CVE-2015-8665
2016-04-13 17:59:00
debiancve
debiancve
CVE-2015-8782
2016-02-01 21:59:00
CVE-2015-8781
2016-02-01 21:59:00
CVE-2015-8784
2016-04-13 17:59:00
mageia
mageia
Updated libtiff package fixes security vulnerabilities
2016-01-14 04:44:39
oraclelinux
oraclelinux
libtiff security update
2016-08-02 00:00:00
libtiff security update
2016-08-02 00:00:00
redhat
redhat
(RHSA-2016:1546) Important: libtiff security update
2016-08-02 14:26:49
(RHSA-2016:1547) Important: libtiff security update
2016-08-02 14:27:54
centos
centos
libtiff security update
2016-08-02 15:06:00
libtiff security update
2016-08-02 21:57:58
veracode
veracode
Denial Of Service (DoS)
2018-08-01 06:37:08
Denial Of Service (DoS)
2018-08-01 03:24:51
Denial Of Service (DoS)
2018-08-01 03:33:49
freebsd
freebsd
tiff -- out-of-bounds read in tif_getimage.c
2015-12-24 00:00:00
tiff -- out-of-bounds read in CIE Lab image format
2015-12-25 00:00:00
slackware
slackware
[slackware-security] libtiff
2017-04-08 20:11:36
suse
suse
Security update for tiff (important)
2016-12-07 15:08:51
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2017-01-09 00:00:00
archlinux
archlinux
[ASA-201611-26] libtiff: multiple issues
2016-11-25 00:00:00
[ASA-201611-27] lib32-libtiff: multiple issues
2016-11-25 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON
Related for USN-2939-1
openvas15debian6cloudfoundry1nessus34osv3amazon2f53ibm3ubuntucve6prion6cve6debiancve6mageia1oraclelinux2redhat2centos2veracode6freebsd2slackware1suse1gentoo1archlinux2kitploit1