Red Hat Security Advisory

RHSA-2021:4241

libtiff security and bug fix update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) libtiff-tools-4.0.9-20.el8
Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-20.el8, libtiff-devel-4.0.9-20.el8

TI-2020-18042 CVE-2020-35524 · GHSA-7xc8-4h5p-pc25

LOW 38

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01851 Published 2021-03-09 Partial fix CWE-787

TI-2020-18041 CVE-2020-35523 · GHSA-5v72-4q26-mq7p

LOW 38

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01922 Published 2021-03-09 Partial fix CWE-190

TI-2020-18040 CVE-2020-35522 · GHSA-5hqr-x5p5-7g25

LOW 28

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01574 Published 2021-03-09 Partial fix CWE-119

TI-2020-18039 CVE-2020-35521 · GHSA-9g68-wfgw-rc4f

LOW 27

A flaw was found in libtiff.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01226 Published 2021-03-09 Partial fix CWE-119