Red Hat Security AdvisoryRHSA-2014:0222
libtiff security update
Released 2014-02-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-10.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-3.9.4-10.el6_5, libtiff-devel-3.9.4-10.el6_5, libtiff-static-3.9.4-10.el6_5
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-10.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-3.9.4-10.el6_5, libtiff-devel-3.9.4-10.el6_5, libtiff-static-3.9.4-10.el6_5
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-10.el6_5, libtiff-3.9.4-10.el6_5.ppc, libtiff-devel-3.9.4-10.el6_5 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-3.9.4-10.el6_5, libtiff-static-3.9.4-10.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-10.el6_5, libtiff-devel-3.9.4-10.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-3.9.4-10.el6_5, libtiff-static-3.9.4-10.el6_5
Fixes 7 records
Priority MEDIUM 54
Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TI…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11823 · Published 2013-07-03 · Fixed CWE-119
Priority MEDIUM 49
Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a T…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05913 · Published 2013-07-03 · Fixed CWE-119
Priority MEDIUM 40
Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted hei…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07165 · Published 2013-09-10 · Fixed CWE-119
Priority LOW 38
Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05019 · Published 2013-09-10 · Fixed CWE-399
Priority LOW 35
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02699 · Published 2013-09-28 · Fixed CWE-119
Priority LOW 30
Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07399 · Published 2014-01-19 · Fixed CWE-119
Priority LOW 24
The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02239 · Published 2010-07-01 · Fixed CWE-20
THREATIST.IORead the docs