Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3212-1
HistoryFeb 27, 2017 - 12:00 a.m.

LibTIFF vulnerabilities

2017-02-2700:00:00
ubuntu.com
80

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.091 Low

EPSS

Percentile

94.5%

JSON

Releases

  • Ubuntu 16.10
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.10noarchlibtiff-tools< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff-doc< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff-opengl< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff-opengl-dbgsym< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff-tools-dbgsym< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff5< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff5-dbgsym< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiff5-dev< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiffxx5< 4.0.6-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibtiffxx5-dbgsym< 4.0.6-2ubuntu0.1UNKNOWN
Rows per page:
1-10 of 311

References

Related

nessus 64
openvas 46
cloudfoundry 1
debian 7
osv 9
ubuntu 2
mageia 3
archlinux 2
suse 3
oraclelinux 2
freebsd 2
amazon 2
redhat 3
centos 3
slackware 1
f5 3
fedora 1
gentoo 1
threatpost 1
redhatcve 5
ubuntucve 14
rosalinux 1
prion 6
debiancve 3
alpinelinux 3
cve 5
ibm 3
veracode 2
kitploit 1
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : LibTIFF vulnerabilities (USN-3212-1)
2017-02-28 00:00:00
Debian DSA-3762-1 : tiff - security update
2017-01-16 00:00:00
Debian DLA-795-1 : tiff security update
2017-01-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3212-1)
2017-03-02 00:00:00
Debian Security Advisory DSA 3762-1 (tiff - security update)
2017-01-13 00:00:00
Debian: Security Advisory (DSA-3762-1)
2017-01-12 00:00:00
cloudfoundry
cloudfoundry
USN-3212-1: LibTIFF vulnerabilities | Cloud Foundry
2017-03-17 00:00:00
debian
debian
[SECURITY] [DSA 3762-1] tiff security update
2017-01-13 15:45:16
[SECURITY] [DLA 795-1] tiff security update
2017-01-23 23:01:22
[SECURITY] [DLA 606-1] tiff security update
2016-08-30 22:20:44
osv
osv
tiff - security update
2017-01-13 00:00:00
tiff - security update
2017-01-23 00:00:00
tiff - security update
2016-11-22 00:00:00
ubuntu
ubuntu
LibTIFF vulnerabilities
2017-07-19 00:00:00
LibTIFF vulnerabilities
2017-08-07 00:00:00
mageia
mageia
The updated packages fix libtiff security vulnerabilities
2016-10-21 01:35:16
Updated libtiff packages fix security vulnerability
2016-11-18 02:40:52
Updated libtiff packages fix security vulnerability
2016-11-28 03:13:28
archlinux
archlinux
[ASA-201611-26] libtiff: multiple issues
2016-11-25 00:00:00
[ASA-201611-27] lib32-libtiff: multiple issues
2016-11-25 00:00:00
suse
suse
Security update for tiff (important)
2016-12-07 15:08:51
Security update for tiff (moderate)
2018-12-08 15:12:16
Security update for tiff (moderate)
2018-12-23 00:10:13
oraclelinux
oraclelinux
libtiff security update
2017-02-01 00:00:00
libtiff security update
2016-08-02 00:00:00
freebsd
freebsd
tiff -- multiple vulnerabilities
2016-11-19 00:00:00
tiff -- buffer overflow
2016-06-28 00:00:00
amazon
amazon
Medium: libtiff, compat-libtiff3
2017-03-06 14:00:00
Important: libtiff
2016-08-17 13:30:00
redhat
redhat
(RHSA-2017:0225) Moderate: libtiff security update
2017-02-01 07:02:26
(RHSA-2016:1547) Important: libtiff security update
2016-08-02 14:27:54
(RHSA-2016:1546) Important: libtiff security update
2016-08-02 14:26:49
centos
centos
libtiff security update
2017-02-01 12:51:43
libtiff security update
2016-08-02 21:57:58
libtiff security update
2016-08-02 15:06:00
slackware
slackware
[slackware-security] libtiff
2017-04-08 20:11:36
f5
f5
K34527393 : LibTIFF vulnerabilities CVE-2016-9533, CVE-2016-9534, and CVE-2016-9535
2017-04-12 00:00:00
K45593826 : LibTIFF vulnerabilities CVE-2015-8870, CVE-2016-5652, CVE-2016-9536, CVE-2016-9537, and CVE-2016-9540
2017-04-12 00:00:00
K89096577 : LibTIFF vulnerabilities CVE-2016-5314 and CVE-2015-8784
2016-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: mingw-libtiff-4.0.9-1.fc28
2018-06-20 14:49:43
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2017-01-09 00:00:00
threatpost
threatpost
Remote Code Execution Vulnerabilities Plague LibTIFF Library
2016-10-26 12:34:20
redhatcve
redhatcve
CVE-2016-5875
2016-10-28 07:47:23
CVE-2016-9448
2016-11-23 17:19:21
CVE-2016-5320
2016-06-15 08:18:35
ubuntucve
ubuntucve
CVE-2016-9536
2016-11-22 00:00:00
CVE-2016-9448
2017-01-27 00:00:00
CVE-2016-9534
2016-11-22 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1896
2021-07-02 17:18:37
prion
prion
Null pointer dereference
2017-01-27 17:59:00
Design/Logic Flaw
2018-03-12 02:29:00
Design/Logic Flaw
2018-03-12 02:29:00
debiancve
debiancve
CVE-2016-9448
2017-01-27 17:59:00
CVE-2016-9453
2017-01-27 17:59:00
CVE-2016-10093
2017-03-01 15:59:00
alpinelinux
alpinelinux
CVE-2016-9448
2017-01-27 17:59:00
CVE-2016-5875
2018-03-12 02:29:00
CVE-2016-5320
2018-03-12 02:29:00
cve
cve
CVE-2016-5875
2018-03-12 02:29:00
CVE-2016-5320
2018-03-12 02:29:00
CVE-2016-9448
2017-01-27 17:59:00
ibm
ibm
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libTIFF
2023-12-07 22:45:03
Security Bulletin: Multiple vulnerabilities in libtiff affect PowerKVM
2018-06-18 01:33:05
Security Bulletin: Libtiff vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
veracode
veracode
Denial Of Service (DoS) Through Integer Overflow
2018-06-05 07:46:57
Out-of-bounds Write
2019-05-02 06:09:59
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.091 Low

EPSS

Percentile

94.5%

JSON
Related for USN-3212-1
nessus64openvas46cloudfoundry1debian7osv9ubuntu2mageia3archlinux2suse3oraclelinux2freebsd2amazon2redhat3centos3slackware1f53fedora1gentoo1threatpost1redhatcve5ubuntucve14rosalinux1prion6debiancve3alpinelinux3cve5ibm3veracode2kitploit1