rpm package
suse/tiff&distro=SUSE Linux Enterprise Micro 5.2
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.2
Vulnerabilities (62)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-3316 | — | < 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 | Jun 19, 2023 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. | ||
| CVE-2023-26965 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. | ||
| CVE-2023-2731 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 17, 2023 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a | ||
| CVE-2023-1916 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Apr 10, 2023 | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff | ||
| CVE-2023-0804 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0803 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0802 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0801 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w | ||
| CVE-2023-0800 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0799 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0798 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0797 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi | ||
| CVE-2023-0796 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0795 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2022-48281 | — | < 4.0.9-150000.45.25.1 | 4.0.9-150000.45.25.1 | Jan 23, 2023 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. | ||
| CVE-2022-3970 | — | < 4.0.9-150000.45.19.1 | 4.0.9-150000.45.19.1 | Nov 13, 2022 | A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t | ||
| CVE-2022-3627 | — | < 4.0.9-150000.45.19.1 | 4.0.9-150000.45.19.1 | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl | ||
| CVE-2022-3626 | — | < 4.0.9-150000.45.19.1 | 4.0.9-150000.45.19.1 | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availa | ||
| CVE-2022-3599 | — | < 4.0.9-150000.45.19.1 | 4.0.9-150000.45.19.1 | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125. | ||
| CVE-2022-3598 | — | < 4.0.9-150000.45.22.1 | 4.0.9-150000.45.22.1 | Oct 21, 2022 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b. |
- CVE-2023-3316Jun 19, 2023affected < 4.0.9-150000.45.32.1fixed 4.0.9-150000.45.32.1
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
- CVE-2023-26965Jun 14, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
- CVE-2023-2731May 17, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a
- CVE-2023-1916Apr 10, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff
- CVE-2023-0804Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0803Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0802Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0801Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w
- CVE-2023-0800Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0799Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0798Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0797Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi
- CVE-2023-0796Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0795Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2022-48281Jan 23, 2023affected < 4.0.9-150000.45.25.1fixed 4.0.9-150000.45.25.1
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
- CVE-2022-3970Nov 13, 2022affected < 4.0.9-150000.45.19.1fixed 4.0.9-150000.45.19.1
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t
- CVE-2022-3627Oct 21, 2022affected < 4.0.9-150000.45.19.1fixed 4.0.9-150000.45.19.1
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availabl
- CVE-2022-3626Oct 21, 2022affected < 4.0.9-150000.45.19.1fixed 4.0.9-150000.45.19.1
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is availa
- CVE-2022-3599Oct 21, 2022affected < 4.0.9-150000.45.19.1fixed 4.0.9-150000.45.19.1
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
- CVE-2022-3598Oct 21, 2022affected < 4.0.9-150000.45.22.1fixed 4.0.9-150000.45.22.1
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
Page 2 of 4