Skip to content
OpenAdvisories
Unscored DSA-4100-1 6 CVEs

tiff - security update

Published Jan 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 tiff 4.0.3-12.3+deb8u5
Debian · 9 tiff 4.0.8-2+deb9u2

Vulnerabilities 6

  • Unscored —
    CVE-2017-11335

    There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which cause…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2017-12944

    The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which a…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2017-13726

    There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2017-13727

    There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dir…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2017-18013

    In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated b…

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9935

    In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ov…

    tiff tiff tiff Debian Ubuntu Alpine