tiff - security update

Fixed packages 1

Vulnerabilities 18

• Critical 9.8
  CVE-2016-9535

  tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or …

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• High 8.8
  CVE-2017-5225

  LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution vi…

  tiff tiff tiff Debian Ubuntu Alpine
  Jan 12, 2017
• Unscored —
  CVE-2016-10266

  LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…

  tiff tiff Debian Ubuntu
  Mar 24, 2017
• Unscored —
  CVE-2016-10267

  LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…

  tiff tiff Debian Ubuntu
  Mar 24, 2017
• Unscored —
  CVE-2016-10269

  LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 a…

  tiff tiff Debian Ubuntu
  Mar 24, 2017
• Unscored —
  CVE-2016-10270

  LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspe…

  tiff Debian
  Mar 24, 2017
• Unscored —
  CVE-2016-3658

  The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier all…

  tiff tiff tiff Debian Ubuntu Alpine
  Oct 3, 2016
• Unscored —
  CVE-2017-7592

  The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might all…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7593

  tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attacker…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7594

  The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a den…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7595

  The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divi…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7596

  LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might al…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7597

  tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issu…

  tiff tiff Debian Ubuntu
  Apr 9, 2017
• Unscored —
  CVE-2017-7598

  tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and appl…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7599

  LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might al…

  tiff tiff Debian Ubuntu
  Apr 9, 2017
• Unscored —
  CVE-2017-7600

  LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which …

  tiff tiff Debian Ubuntu
  Apr 9, 2017
• Unscored —
  CVE-2017-7601

  LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote …

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017
• Unscored —
  CVE-2017-7602

  LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicati…

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 9, 2017