Summary
[4.0.3-32]
- Fix one more Covscan defect
- Related: #1647965
[4.0.3-31]
- Fix processing of RAS files without colormap
- Related: #1647965
[4.0.3-30]
- Fix various Covscan defects
- Related: #1647965
[4.0.3-29]
- Fix compiler warning introduced by patch for CVE-2018-18661
- Related: #1647965
[4.0.3-28]
- Fix CVE-2016-3186
- Resolves: #1319503
- Fix CVE-2018-7456
- Resolves: #1561318
- Fix CVE-2018-8905
- Resolves: #1574548
- Fix CVE-2018-10779
- Resolves: #1598503
- Fix CVE-2018-10963
- Resolves: #1598726
- Fix CVE-2018-12900
- Resolves: #1600430
- Fix CVE-2018-17100
- Resolves: #1632578
- Fix CVE-2018-17101
- Resolves: #1632579
- Fix CVE-2018-18557
- Resolves: #1647737
- Fix CVE-2018-18661
- Resolves: #1647965
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libtiff | 0:4.0.3-32.el7 |
| Oracle Linux · 7 | libtiff-devel | 0:4.0.3-32.el7 |
| Oracle Linux · 7 | libtiff-static | 0:4.0.3-32.el7 |
| Oracle Linux · 7 | libtiff-tools | 0:4.0.3-32.el7 |
Vulnerabilities 10
-
Unscored —
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial …
-
Unscored —
TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
-
Unscored —
The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a deni…
-
Unscored —CVE-2018-12900 EPSS 25%
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, …
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal…
-
Unscored —
LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif…
-
Unscored —
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9…
-
Unscored —
In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF f…