Red Hat Security AdvisoryRHSA-2017:0225
libtiff security update
Released 2017-02-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libtiff-4.0.3-27.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) libtiff-devel-4.0.3-27.el7_3, libtiff-static-4.0.3-27.el7_3, libtiff-tools-4.0.3-27.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) libtiff-4.0.3-27.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libtiff-devel-4.0.3-27.el7_3, libtiff-static-4.0.3-27.el7_3, libtiff-tools-4.0.3-27.el7_3
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-21.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-devel-3.9.4-21.el6_8, libtiff-static-3.9.4-21.el6_8
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-21.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-devel-3.9.4-21.el6_8, libtiff-static-3.9.4-21.el6_8
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-21.el6_8, libtiff-3.9.4-21.el6_8.ppc, libtiff-devel-3.9.4-21.el6_8 +1
- Red Hat Enterprise Linux Server (v. 7) libtiff-4.0.3-27.el7_3, libtiff-4.0.3-27.el7_3.ppc, libtiff-devel-4.0.3-27.el7_3 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-static-3.9.4-21.el6_8
- Red Hat Enterprise Linux Server Optional (v. 7) libtiff-static-4.0.3-27.el7_3, libtiff-static-4.0.3-27.el7_3.ppc, libtiff-tools-4.0.3-27.el7_3
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-21.el6_8, libtiff-devel-3.9.4-21.el6_8
- Red Hat Enterprise Linux Workstation (v. 7) libtiff-4.0.3-27.el7_3, libtiff-devel-4.0.3-27.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-static-3.9.4-21.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) libtiff-static-4.0.3-27.el7_3, libtiff-tools-4.0.3-27.el7_3
Fixes 8 records
Priority MEDIUM 56
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04728 · Published 2016-11-22 · Partial fix CWE-119
Priority MEDIUM 48
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03676 · Published 2016-11-22 · Partial fix CWE-119
Priority MEDIUM 48
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03135 · Published 2016-11-22 · Partial fix CWE-119
Priority MEDIUM 48
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip().
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03135 · Published 2016-11-22 · Partial fix CWE-119
Priority MEDIUM 48
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03553 · Published 2016-11-22 · Partial fix CWE-119
Priority MEDIUM 48
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.036 · Published 2016-11-22 · Partial fix CWE-119
Priority LOW 38
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool.
CVSS 3.0HIGH 7.0· Local · No auth · User interaction · EPSS 0.04141 · Published 2017-01-06 · Partial fix CWE-119
Priority LOW 37
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted w…
CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.02081 · Published 2016-12-06 · Partial fix CWE-190
THREATIST.IORead the docs