rpm package
suse/tiff&distro=SUSE Linux Enterprise Software Development Kit 12 SP3
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
Vulnerabilities (46)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2016-6223 | Cri | 9.1 | < 4.0.9-44.30.1 | 4.0.9-44.30.1 | Jan 23, 2017 | The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer. | |
| CVE-2016-5319 | Med | 6.5 | < 4.0.9-44.21.1 | 4.0.9-44.21.1 | Jan 20, 2017 | Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. | |
| CVE-2016-5318 | Med | 6.5 | < 4.0.9-44.7.1 | 4.0.9-44.7.1 | Jan 20, 2017 | Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. | |
| CVE-2016-8331 | Hig | 8.1 | < 4.0.9-44.15.2 | 4.0.9-44.15.2 | Oct 28, 2016 | An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered | |
| CVE-2016-3632 | Hig | 7.8 | < 4.0.9-44.15.2 | 4.0.9-44.15.2 | Sep 21, 2016 | The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image. | |
| CVE-2015-7554 | Cri | 9.8 | < 4.0.9-44.7.1 | 4.0.9-44.7.1 | Jan 8, 2016 | The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. |
- affected < 4.0.9-44.30.1fixed 4.0.9-44.30.1
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
- affected < 4.0.9-44.21.1fixed 4.0.9-44.21.1
Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.
- affected < 4.0.9-44.7.1fixed 4.0.9-44.7.1
Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
- affected < 4.0.9-44.15.2fixed 4.0.9-44.15.2
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered
- affected < 4.0.9-44.15.2fixed 4.0.9-44.15.2
The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.
- affected < 4.0.9-44.7.1fixed 4.0.9-44.7.1
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
Page 3 of 3