rpm package
suse/tiff&distro=SUSE Linux Enterprise Micro 5.5
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.5
Vulnerabilities (25)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-3316 | — | < 4.0.9-150000.45.32.1 | 4.0.9-150000.45.32.1 | Jun 19, 2023 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. | ||
| CVE-2023-26965 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. | ||
| CVE-2023-2731 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 17, 2023 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a | ||
| CVE-2023-1916 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | Apr 10, 2023 | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff | ||
| CVE-2022-1622 | — | < 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 | May 11, 2022 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. |
- CVE-2023-3316Jun 19, 2023affected < 4.0.9-150000.45.32.1fixed 4.0.9-150000.45.32.1
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
- CVE-2023-26965Jun 14, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
- CVE-2023-2731May 17, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a
- CVE-2023-1916Apr 10, 2023affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue aff
- CVE-2022-1622May 11, 2022affected < 4.0.9-150000.45.35.1fixed 4.0.9-150000.45.35.1
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
Page 2 of 2