rpm package
suse/tiff&distro=SUSE Linux Enterprise Micro 5.4
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.4
Vulnerabilities (35)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-3316 | — | < 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 | Jun 19, 2023 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. | ||
| CVE-2023-26965 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. | ||
| CVE-2023-2731 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 17, 2023 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a | ||
| CVE-2023-1916 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Apr 10, 2023 | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff | ||
| CVE-2023-0804 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0803 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0802 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0801 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w | ||
| CVE-2023-0800 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. | ||
| CVE-2023-0799 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0798 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0797 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi | ||
| CVE-2023-0796 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2023-0795 | — | < 4.0.9-150000.45.28.1 | 4.0.9-150000.45.28.1 | Feb 13, 2023 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. | ||
| CVE-2022-1622 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 11, 2022 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. |
- CVE-2023-3316Jun 19, 2023affected < 4.0.9-150000.45.32.1fixed 4.0.9-150000.45.32.1
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
- CVE-2023-26965Jun 14, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
- CVE-2023-2731May 17, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a
- CVE-2023-1916Apr 10, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff
- CVE-2023-0804Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0803Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0802Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0801Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available w
- CVE-2023-0800Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
- CVE-2023-0799Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0798Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0797Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available wi
- CVE-2023-0796Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2023-0795Feb 13, 2023affected < 4.0.9-150000.45.28.1fixed 4.0.9-150000.45.28.1
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
- CVE-2022-1622May 11, 2022affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
Page 2 of 2