Skip to content
OpenAdvisories
Medium ELSA-2025-4658 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

Published May 7, 2025 · Updated May 7, 2025

Ecosystem: Oracle Linux

Summary

[4.0.9-34]
- fix CVE-2017-17095: heap-based buffer overflow in pal2rgb (RHEL-87363)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 libtiff 0:4.0.9-34.el8_10
Oracle Linux · 8 libtiff-devel 0:4.0.9-34.el8_10
Oracle Linux · 8 libtiff-tools 0:4.0.9-34.el8_10

Vulnerabilities 1

  • Unscored —
    CVE-2017-17095 Public exploit EPSS 11%

    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-…

    tiff tiff tiff Debian Ubuntu Alpine