Summary
[3.9.4-21]
- Fix patch for CVE-2016-5652
- Related: #1412078
[3.9.4-20]
- Fix CWE-476 defect found by covscan
- Related: #1412078
[3.9.4-19]
- Add patches for CVEs:
- CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
- CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
- CVE-2016-5652
- Resolves: #1412078
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libtiff | 0:4.0.3-27.el7_3 |
| Oracle Linux · 7 | libtiff-devel | 0:4.0.3-27.el7_3 |
| Oracle Linux · 7 | libtiff-static | 0:4.0.3-27.el7_3 |
| Oracle Linux · 7 | libtiff-tools | 0:4.0.3-27.el7_3 |
Vulnerabilities 8
-
Critical 9.8
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or …
-
Unscored —
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap…
-
Unscored —
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted T…
-
Unscored —
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 350…
-
Unscored —
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc an…
-
Unscored —
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg…
-
Unscored —
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 3509…
-
Unscored —
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Repo…