Skip to content
OpenAdvisories
Unscored RHSA-2006:0425 4 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libtiff 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-debuginfo 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-devel 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-debuginfo 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-devel 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::es libtiff 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-debuginfo 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-devel 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-debuginfo 0:3.5.7-25.el3.1
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-devel 0:3.5.7-25.el3.1
Red Hat · RHEL 4 enterprise_linux:4::as libtiff 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-debuginfo 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::as libtiff-devel 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-debuginfo 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::desktop libtiff-devel 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::es libtiff 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-debuginfo 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::es libtiff-devel 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-debuginfo 0:3.6.1-10
Red Hat · RHEL 4 enterprise_linux:4::ws libtiff-devel 0:3.6.1-10

Vulnerabilities 4

  • Unscored —
    CVE-2006-2024 Public exploit

    Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…

    tiff Debian
  • Unscored —
    CVE-2006-2025 Public exploit EPSS 11%

    Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…

    tiff Debian
  • Unscored —
    CVE-2006-2026 Public exploit EPSS 10%

    Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…

    tiff Debian
  • Unscored —
    CVE-2006-2120

    The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a craft…

    tiff Debian

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=189933
  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=189974
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0425.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2024
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2024
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2024
  • report
    https://access.redhat.com/security/cve/CVE-2006-2025
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618084
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2025
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2025
  • report
    https://access.redhat.com/security/cve/CVE-2006-2026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2026
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2026
  • report
    https://access.redhat.com/security/cve/CVE-2006-2120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618087
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2120
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2120