Unscored DLA-2009-1 5 CVEs

tiff - security update

Published Nov 26, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	tiff	4.0.3-12.3+deb8u10

Vulnerabilities 5

Unscored —

CVE-2017-17095 Public exploit EPSS 11%

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-…

tiff tiff tiff Debian Ubuntu Alpine

Dec 2, 2017
Unscored —

CVE-2018-12900 EPSS 25%

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, …

tiff tiff tiff Debian Ubuntu Alpine

Jun 26, 2018
Unscored —

CVE-2018-18661

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif…

tiff tiff tiff Debian Ubuntu Alpine

Oct 26, 2018
Unscored —

CVE-2019-17546

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow tha…

tiff tiff openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux

Oct 14, 2019
Unscored —

CVE-2019-6128

The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

tiff tiff tiff Debian Ubuntu Alpine

Jan 11, 2019